CVE-2014-4734: XSS
Cross-site scripting (XSS) vulnerability in e107admin/db.php in e107 2.0 alpha2 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4734?
CVE-2014-4734 is classified as a medium severity vulnerability due to its impact on the security of the affected web applications.
How do I fix CVE-2014-4734?
To fix CVE-2014-4734, you should upgrade to a version of e107 later than 2.0 alpha2 that addresses this cross-site scripting vulnerability.
What applications are affected by CVE-2014-4734?
CVE-2014-4734 affects e107 versions 2.0 alpha2 and earlier, including 2.0-alpha1.
What type of vulnerability is CVE-2014-4734?
CVE-2014-4734 is a cross-site scripting (XSS) vulnerability allowing attackers to inject arbitrary web scripts or HTML.
Can CVE-2014-4734 be exploited remotely?
Yes, CVE-2014-4734 can be exploited remotely by attackers to inject malicious scripts into affected web applications.