CVE-2013-5744: XSS
Published Oct 28, 2013
·Updated
Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrary web script or HTML via an arbitrary refXXX parameter.
Affected Software
46 affected components
Fengoffice Feng Office<=2.3.2
Fengoffice Feng Office=1.6.2
Fengoffice Feng Office=1.7
Fengoffice Feng Office=1.7-beta
Fengoffice Feng Office=1.7-beta2
Fengoffice Feng Office=1.7-rc
Fengoffice Feng Office=1.7-rc2
Fengoffice Feng Office=1.7-rc3
Fengoffice Feng Office=1.7.1
Fengoffice Feng Office=1.7.2
Fengoffice Feng Office=1.7.3.1
Fengoffice Feng Office=1.7.4
Fengoffice Feng Office=1.7.5
Fengoffice Feng Office=1.7.5-beta
Fengoffice Feng Office=1.7.5-rc2
Fengoffice Feng Office=1.7.5-rc3
Fengoffice Feng Office=2.0.0
Fengoffice Feng Office=2.0.0-beta1
Fengoffice Feng Office=2.0.0-beta2
Fengoffice Feng Office=2.0.0-beta3
Fengoffice Feng Office=2.0.0-beta4
Fengoffice Feng Office=2.0.0-rc
Fengoffice Feng Office=2.1.0
Fengoffice Feng Office=2.1.0-beta
Fengoffice Feng Office=2.1.0-rc
Fengoffice Feng Office=2.1.0-rc2
Fengoffice Feng Office=2.2.0
Fengoffice Feng Office=2.2.0-beta
Fengoffice Feng Office=2.2.0-rc
Fengoffice Feng Office=2.2.1
Fengoffice Feng Office=2.2.1-rc
Fengoffice Feng Office=2.2.2
Fengoffice Feng Office=2.2.3.1
Fengoffice Feng Office=2.2.3.1-beta
Fengoffice Feng Office=2.2.4
Fengoffice Feng Office=2.2.4-beta
Fengoffice Feng Office=2.2.4.1
Fengoffice Feng Office=2.3
Fengoffice Feng Office=2.3-beta
Fengoffice Feng Office=2.3-rc
Fengoffice Feng Office=2.3-rc2
Fengoffice Feng Office=2.3.1
Fengoffice Feng Office=2.3.1-beta
Fengoffice Feng Office=2.3.1-rc
Fengoffice Feng Office=2.3.1.1
Fengoffice Feng Office=2.3.2-beta
Event History
Oct 28, 2013
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5744?
CVE-2013-5744 has a medium severity level due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2013-5744?
To fix CVE-2013-5744, update Feng Office to the latest version where the vulnerability has been patched.
3
What type of vulnerability is CVE-2013-5744?
CVE-2013-5744 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.
4
Which versions of Feng Office are affected by CVE-2013-5744?
CVE-2013-5744 affects Feng Office versions 2.3.2-rc and earlier.
5
Can CVE-2013-5744 be exploited remotely?
Yes, CVE-2013-5744 allows remote attackers to exploit the vulnerability by injecting malicious scripts.