CVE-2013-1466

Severity CVSS v4.0:

Pending analysis

Type:

CWE-79 Cross-Site Scripting (XSS)

Publication date:

05/02/2014

Last modified:

29/04/2026

Description

Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTML via the (1) subject parameter to profiles.php; (2) address1, (3) address2, (4) calendar_type, (5) city, (6) state, (7) title, (8) url, or (9) zipcode parameter to calendar/index.php; (10) title or (11) url parameter to links/index.php; or (12) PATH_INFO to admin/plugins/mediagallery/xppubwiz.php/.

Impact

Vector 2.0

AV:N/AC:M/Au:N/C:N/I:P/A:N CVSS v2.0 Severity and Metrics:

Base Score: 4.30 MEDIUM
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Attack Vector (AV): Network
Attack Complexity (AC): Medium
Authentication (Au): None
Confidentiality (C): None
Integrity (I): Physical
Availability (A): None

Base Score 2.0

4.30

Severity 2.0

MEDIUM

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:glfusion:glfusion::::::::		1.2.2.pl3 (including)
cpe:2.3:a:glfusion:glfusion:1.0.0:::::::*
cpe:2.3:a:glfusion:glfusion:1.0.0:rc1::::::
cpe:2.3:a:glfusion:glfusion:1.0.0:rc2::::::
cpe:2.3:a:glfusion:glfusion:1.0.1:::::::*
cpe:2.3:a:glfusion:glfusion:1.0.2:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.0:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.0:rc1::::::
cpe:2.3:a:glfusion:glfusion:1.1.1:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.2:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.3:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.4:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.4.pl1:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.4.pl2:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.4.pl3:::::::*

To consult the complete list of CPE names with products and versions, see this page

CPE	From	Up to
cpe:2.3:a:glfusion:glfusion::::::::		1.2.2.pl3 (including)
cpe:2.3:a:glfusion:glfusion:1.0.0:::::::*
cpe:2.3:a:glfusion:glfusion:1.0.0:rc1::::::
cpe:2.3:a:glfusion:glfusion:1.0.0:rc2::::::
cpe:2.3:a:glfusion:glfusion:1.0.1:::::::*
cpe:2.3:a:glfusion:glfusion:1.0.2:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.0:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.0:rc1::::::
cpe:2.3:a:glfusion:glfusion:1.1.1:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.2:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.3:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.4:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.4.pl1:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.4.pl2:::::::*
cpe:2.3:a:glfusion:glfusion:1.1.4.pl3:::::::*

CVE-2013-1466

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools