CVE-2014-7291  Springshare LibCal XSS (Cross-Site Scripting) Security Vulnerability


887
Exploit Title: Springshare LibCal Multiple XSS (Cross-Site Scripting) Vulnerabilit
Product: LibCal
Vendor: Springshare
Vulnerable Versions: 2.0
Tested Version: 2.0
Advisory Publication: Nov 25, 2014
Latest Update: Nov 25, 2014
Vulnerability Type: Cross-Site Scripting [CWE-79]
CVE Reference: CVE-2014-7291
CVSS v2 Base Score: 4.3 (MEDIUM) (AV:N/AC:M/Au:N/C:N/I:P/A:N) (legend)
Impact Subscore: 2.9
Exploitability Subscore: 8.6
Solution Status: Fixed by Vendor
Credit: Wang Jing [SPMS, Nanyang Technological University (NTU), Singapore]

http://itprompt.blogspot.com/2014/12/cve-2014-7291-springshare-libcal-xss.html

Advertisements