NetSight
IP …
medium4.3

CVE-2013-4722

Multiple cross-site scripting (XSS) vulnerabilities in Admin/login/default.asp in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, an…

Impact

Multiple cross-site scripting (XSS) vulnerabilities in Admin/login/default.asp in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) url, (3) qstr parameter.

Affected products

VendorProductAffected versions
DdsnCm3 Acora Content Management System
Versions 5.5.0\/1b-p1, 5.5.7\/12b, 6.0.2\/1a, 6.0.6\/1a

Weakness classification

CWE-79

References