Lucene search
PRIOn knowledge basePRION:CVE-2016-1000307HistoryApr 06, 2017 - 11:59 p.m.
Cross site scripting
2017-04-0623:59:00
PRIOn knowledge base
www.prio-n.com
3
Multiple Cross Site Scripting (XSS) Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via (1) profile_desc, about_me, schools, occupation, companies, hobbies, fav_movies, fav_music, fav_books parameters to ProfileSettings page; (2) note parameter to PersonalNotes Section; (3) closed_msg, description, allowed_types parameters to WebsiteConfigurations Section. NOTE: the collection_description vector is already covered by CVE-2015-4673.
| CPE | Name | Operator | Version |
|---|---|---|---|
| clipbucket | le | 2.8.1 |
Related
cve
cve
CVE-2016-1000307
2022-10-03 16:16:34
CVE-2015-4673
2017-04-06 23:59:00
CVE-2016-1000306
2022-10-03 16:16:34
nvd
nvd
CVE-2016-1000307
2017-04-06 23:59:00
CVE-2015-4673
2017-04-06 23:59:00
CVE-2016-1000306
2017-04-06 23:59:00
cvelist
cvelist
CVE-2016-1000307
2022-10-03 16:16:34
CVE-2015-4673
2017-04-06 23:00:00
prion
prion
Cross site scripting
2017-04-06 23:59:00
Design/Logic Flaw
2017-04-06 23:59:00