Lucene search
Japan Vulnerability NotesJVN:41028866HistoryJul 16, 2014 - 12:00 a.m.
JVN#41028866: Multifunctional MailForm Free vulnerable to cross-site scripting
2014-07-1600:00:00
Japan Vulnerability Notes
jvn.jp
14
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
49.1%
Multifunctional MailForm Free contains an issue in processing HTTP Referer headers, which may cause cross-site scripting.
Impact
By opening a specially crafted HTML document, an arbitrary sctipt may be executed.
Solution
Update the software
Update to the latest version according to the information provided by the developer.
Products Affected
- Multifunctional MailForm Free updated on 2014/1/28 and earlier
Related
cve
cve
CVE-2014-3894
2014-07-20 11:12:50
nvd
nvd
CVE-2014-3894
2014-07-20 11:12:50
prion
prion
Cross site scripting
2014-07-20 11:12:00
cvelist
cvelist
CVE-2014-3894
2014-07-20 10:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
49.1%
Related for JVN:41028866