medium4.3
CVE-2014-8352
Cross-site scripting (XSS) vulnerability in json.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz allows remote we servers to …
Impact
Cross-site scripting (XSS) vulnerability in json.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz allows remote we servers to inject arbitrary web script or HTML via the max_date parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| French National Commission On Informatics And Liberty | Cookieviz | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/128960/CNIL-CookieViz-Cross-Site-Scripting-SQL-Injection.html
- http://seclists.org/fulldisclosure/2014/Nov/3
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98452
- https://github.com/LaboCNIL/CookieViz/commit/489b6050f6c53fe7b24c4bed3eeb9c25543960e2
- http://packetstormsecurity.com/files/128960/CNIL-CookieViz-Cross-Site-Scripting-SQL-Injection.html
- http://seclists.org/fulldisclosure/2014/Nov/3
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98452
- https://github.com/LaboCNIL/CookieViz/commit/489b6050f6c53fe7b24c4bed3eeb9c25543960e2