Lucene search
HistoryJan 29, 2014 - 6:55 p.m.
CVE-2013-4888
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.002
Percentile
53.2%
Cross-site scripting (XSS) vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the layout parameter in the layout page.
Affected configurations
Node
springsignagexiboMatch1.4.2
Related
prion
prion
Cross site scripting
2014-01-29 18:55:00
Cross site request forgery (csrf)
2014-01-29 18:55:00
cvelist
cvelist
CVE-2013-4888
2014-01-29 18:00:00
CVE-2013-4889
2014-01-29 18:00:00
cve
cve
CVE-2013-4888
2014-01-29 18:55:26
CVE-2013-4889
2014-01-29 18:55:26
exploitpack
exploitpack
Xibo - Cross-Site Request Forgery
2013-08-21 00:00:00
nvd
nvd
CVE-2013-4889
2014-01-29 18:55:26
exploitdb
exploitdb
Xibo - Cross-Site Request Forgery
2013-08-21 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.002
Percentile
53.2%
Related for NVD:CVE-2013-4888