Cross site scripting

2010-12-0116:06:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

JSON

Cross-site scripting (XSS) vulnerability in DaDaBIK before 4.3 beta2, when the insert or edit feature is enabled, allows remote authenticated users to inject arbitrary web script or HTML via the select_single parameter.

CPENameOperatorVersion
dadabikeq1.5.98
dadabikeq4.3 beta2
dadabikeq1.0.1 beta
dadabikeq2.2.1
dadabikeq4.1 rc2
dadabikeq3.0 beta
dadabikeq1.0.3 beta
dadabikeq1.5
dadabikeq2.1b beta
dadabikeq1.0 beta

Name	Operator	Version
dadabik	eq	1.5.98
dadabik	eq	4.3 beta2
dadabik	eq	1.0.1 beta
dadabik	eq	2.2.1
dadabik	eq	4.1 rc2
dadabik	eq	3.0 beta
dadabik	eq	1.0.3 beta
dadabik	eq	1.5
dadabik	eq	2.1b beta
dadabik	eq	1.0 beta

Rows per page:

1-10 of 411

References

secunia.com/advisories/42220

www.dadabik.org/index.php?function=show_changelog

www.securityfocus.com/bid/44826

exchange.xforce.ibmcloud.com/vulnerabilities/63219