XSS in Php365 365 Links
CVE-2014-5317
Cross-site scripting (XSS) vulnerability in php365.com 365 Links 3.11 and earlier, 365 Links2 3.11 and earlier, 365 Links+ 2.10 and earlier, and 365 Links2+ 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.012 (63.9th percentile) — read the EPSS interpretation.
Affected products
- Php365 365_links
- Php365 365_links\+
- Php365 365_links_2\+
- Php365 365_links2
- N/a — versions n/a
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_JVN, Vendor Advisory, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
- vultures@jpcert.or.jp (vdb-entry, x_refsource_BID)
- vultures@jpcert.or.jp (x_refsource_CONFIRM)