Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2014-4036

Cross-site scripting (XSS) vulnerability in modules/system/admin.php in ImpressCMS 1.3.6.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a listimg action.

PublishedJun 11, 2014, 14:55

Published Bycve@mitre.org

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

impresscms/impresscms(Packagist)0N/AN/A

References

http://packetstormsecurity.com/files/126909/ImpressCMS-1.3.6.1-Cross-Site-Scripting.html

Weakness Type

CWE-79

CVSS Metrics

Base Score

4.3

Vector String

AV:N/AC:M/Au:N/C:N/I:P/A:N

Base SeverityUnknown

Version

2.0

Attack Vector (AV)