XSS in Askia Askiaweb

CVE-2013-0124

Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to inject arbitrary web script or HTML via the (1) Number or (2) UpdatePage parameter to WebProd/cgi-bin/AskiaExt.dll.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.011 (63.4th percentile) — read the EPSS interpretation.

Affected products

Askia Askiaweb
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)