medium4.3
CVE-2015-2957
Cross-site scripting (XSS) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to inject arbitra…
Impact
Cross-site scripting (XSS) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Igreks | Milkystep Light | through 0.94 |
| Igreks | Milkystep Professional | through 1.82 |
| Igreks | Milkystep Professional Oem | through 1.82 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN20879350/995646/index.html
- http://jvn.jp/en/jp/JVN20879350/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000082
- http://www.securityfocus.com/bid/75077
- http://jvn.jp/en/jp/JVN20879350/995646/index.html
- http://jvn.jp/en/jp/JVN20879350/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000082
- http://www.securityfocus.com/bid/75077