critical9.8Public exploit code
CVE-2013-4103
Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cryptocat 2.0.22 - Arbitrary Script Injection2012-11-07 · remote · multiple · Verified
Impact
Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cryptocat Project | Cryptocat | before 2.0.22 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/134252/Cryptocat-Script-Insertion.html
- https://packetstormsecurity.com/files/cve/CVE-2013-4103
- https://tobtu.com/decryptocat.php
- https://www.openwall.com/lists/oss-security/2013/07/10/15
- https://www.securityfocus.com/bid/61093
- http://packetstormsecurity.com/files/134252/Cryptocat-Script-Insertion.html
- https://packetstormsecurity.com/files/cve/CVE-2013-4103
- https://tobtu.com/decryptocat.php
- https://www.openwall.com/lists/oss-security/2013/07/10/15
- https://www.securityfocus.com/bid/61093