CVE-2014-2965

Spamtitan < 6.03 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in auth-settings-x.php in SpamTitan before 6.04 allows remote attackers to inject arbitrary web script or HTML via the sortdir parameter.

References (4)

[Exploit, Third Party Advisory] http://packetstormsecurity.com/files/127184/SpamTitan-6.01-Cross-Site-Scripting.html

[Mailing List] http://seclists.org/fulldisclosure/2014/Jun/113

[Third Party Advisory, US Government Resource] http://www.kb.cert.org/vuls/id/849500

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/68143

Scores

EPSS 0.0082

EPSS Percentile 74.2%

Details

CWE

CWE-79

Status published

Products (13)

spamtitan/spamtitan < 6.03

spamtitan/spamtitan

... and 3 more

Published Jul 03, 2014

Tracked Since Feb 18, 2026