CVE-2013-0805: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the search feature in iTop (aka IT Operations Portal) 2.0, 1.2.1, 1.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to pages/UI.php or (2) expression parameter to pages/runquery.php. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0805?
CVE-2013-0805 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2013-0805?
To fix CVE-2013-0805, upgrade to a patched version of iTop beyond 2.0 that addresses the cross-site scripting vulnerabilities.
What versions of iTop are affected by CVE-2013-0805?
CVE-2013-0805 affects iTop versions 2.0, 1.2.1, 1.2, and earlier.
What are cross-site scripting vulnerabilities like CVE-2013-0805?
Cross-site scripting vulnerabilities, like CVE-2013-0805, allow attackers to inject malicious scripts into web pages viewed by users.
What parameters are involved in CVE-2013-0805?
CVE-2013-0805 involves the 'text' parameter in pages/UI.php and the 'expression' parameter in pages/run_query.php for exploitation.