CVE-2013-6005

Cybozu Dezie < 8.1.0 - Cross-Site Scripting via Cancel Button

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button.

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/89577
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/100819
Third Party Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN21336955/index.html
Third Party Advisory third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000118.html
Various Sources x_refsource_confirm
http://cs.cybozu.co.jp/information/20131209up11.php
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/55962

Scores

EPSS 0.0047
EPSS Percentile 65.1%

Details

CWE
CWE-79
Status published
Products (8)
cybozu/dezie 8.0.0
cybozu/dezie 8.0.1
cybozu/dezie 8.0.2
cybozu/dezie 8.0.3
cybozu/dezie 8.0.4
cybozu/dezie 8.0.5
cybozu/dezie 8.0.6
cybozu/dezie < 8.0.7
Published Dec 13, 2013
Tracked Since Feb 18, 2026