CVE-2013-6042: XSS
Published Nov 15, 2013
·Updated
Cross-site scripting (XSS) vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo before 2.1.4 allows remote attackers to inject arbitrary web script or HTML via the user parameter.
Affected Software
21 affected components
Softaculous Webuzo<=2.1.3
Softaculous Webuzo=1.0
Softaculous Webuzo=1.1
Softaculous Webuzo=1.2
Softaculous Webuzo=1.3
Softaculous Webuzo=1.4
Softaculous Webuzo=1.5
Softaculous Webuzo=1.6
Softaculous Webuzo=1.7
Softaculous Webuzo=1.8
Softaculous Webuzo=1.9
Softaculous Webuzo=2.0
Softaculous Webuzo=2.0.1
Softaculous Webuzo=2.0.2
Softaculous Webuzo=2.0.3
Softaculous Webuzo=2.0.4
Softaculous Webuzo=2.0.5
Softaculous Webuzo=2.0.6
Softaculous Webuzo=2.1.0
Softaculous Webuzo=2.1.1
Softaculous Webuzo=2.1.2
Event History
Nov 15, 2013
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-6042?
CVE-2013-6042 is classified as a medium severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2013-6042?
To fix CVE-2013-6042, upgrade Webuzo to version 2.1.4 or later.
3
What type of attack is possible with CVE-2013-6042?
CVE-2013-6042 allows remote attackers to execute arbitrary web scripts or HTML due to XSS vulnerabilities.
4
Which versions of Webuzo are affected by CVE-2013-6042?
Webuzo versions prior to 2.1.4, including 1.0 to 2.1.3, are affected by CVE-2013-6042.
5
What component is vulnerable in CVE-2013-6042?
The vulnerable component affected by CVE-2013-6042 is the filemanager/login.php in the File Manager module.