CVE-2014-9120: XSS

Q: What is the severity of CVE-2014-9120?

CVE-2014-9120 is classified as a medium severity cross-site scripting (XSS) vulnerability.

Q: How do I fix CVE-2014-9120?

To fix CVE-2014-9120, upgrade Subrion CMS to version 3.2.3 or later.

Q: Which versions of Subrion CMS are affected by CVE-2014-9120?

CVE-2014-9120 affects Subrion CMS versions prior to 3.2.3.

Q: What type of vulnerability is CVE-2014-9120?

CVE-2014-9120 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary HTML or web scripts.

Q: Can remote attackers exploit CVE-2014-9120?

Yes, remote attackers can exploit CVE-2014-9120 by injecting malicious scripts via the `PATH_INFO` parameter.

Published Dec 10, 2014

Updated

A cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to subrion/search/.

Other sources

Cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to subrion/search/.

Affected Software

2 affected componentsFixes available

composer/intelliants/subrion<3.2.3

3.2.3

Intelliants Subrion<=3.2.2

Event History

Dec 10, 2014

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

May 14, 2022

Advisory Published

02:00 AM

Frequently Asked Questions

What is the severity of CVE-2014-9120?

CVE-2014-9120 is classified as a medium severity cross-site scripting (XSS) vulnerability.

How do I fix CVE-2014-9120?

To fix CVE-2014-9120, upgrade Subrion CMS to version 3.2.3 or later.

Which versions of Subrion CMS are affected by CVE-2014-9120?

CVE-2014-9120 affects Subrion CMS versions prior to 3.2.3.

What type of vulnerability is CVE-2014-9120?