{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrary web script or HTML via an arbitrary ref_XXX parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2013-10-28T22:00:00Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.htbridge.com/advisory/HTB23174"}, {"name": "20131009 Cross-Site Scripting (XSS) in Feng Office", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2013-10/0031.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2013-5744", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrary web script or HTML via an arbitrary ref_XXX parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://www.htbridge.com/advisory/HTB23174", "refsource": "MISC", "url": "https://www.htbridge.com/advisory/HTB23174"}, {"name": "20131009 Cross-Site Scripting (XSS) in Feng Office", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2013-10/0031.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T17:22:30.105Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.htbridge.com/advisory/HTB23174"}, {"name": "20131009 Cross-Site Scripting (XSS) in Feng Office", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2013-10/0031.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2013-5744", "datePublished": "2013-10-28T22:00:00Z", "dateReserved": "2013-09-16T00:00:00Z", "dateUpdated": "2024-09-17T02:31:22.750Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:fengoffice:feng_office:*:rc:*:*:*:*:*:*", "matchCriteriaId": "7E031DFD-5572-45F0-806D-0668B9068310", "versionEndIncluding": "2.3.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "2418465C-C63C-4F19-BB75-846E4B9068E8", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7:*:*:*:*:*:*:*", "matchCriteriaId": "01778C8E-A97B-4FCC-9AF1-E90303F43FE1", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7:beta:*:*:*:*:*:*", "matchCriteriaId": "2344DA4D-3BB2-41F3-B69B-AA2993400F01", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7:beta2:*:*:*:*:*:*", "matchCriteriaId": "6E741D2A-1329-4265-81A4-1A0CA59E04EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7:rc:*:*:*:*:*:*", "matchCriteriaId": "D636D1AB-FEFF-4DEE-8735-0168A84FFD36", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7:rc2:*:*:*:*:*:*", "matchCriteriaId": "49212305-B48D-492F-85A0-9DE502EBEE86", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7:rc3:*:*:*:*:*:*", "matchCriteriaId": "5B13199D-A732-4F18-93C3-9856C90EA817", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "D38EC7A1-3FFC-4F48-9660-3CE48EDE1645", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.2:*:*:*:*:*:*:*", "matchCriteriaId": "A9A50B5F-FB66-4DA7-8D94-B9198275F32E", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "E2BB59DF-FBD1-49B5-82D5-D63207F72F85", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.4:*:*:*:*:*:*:*", "matchCriteriaId": "5AD19521-64BB-4CC8-9D0D-5E80E1E9F111", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.5:*:*:*:*:*:*:*", "matchCriteriaId": "1D6BDBBD-4793-44CB-BBFC-DC64B719FFF9", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.5:beta:*:*:*:*:*:*", "matchCriteriaId": "AA5E28AA-93DB-4381-8AFF-AA59322AECC0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.5:rc2:*:*:*:*:*:*", "matchCriteriaId": "9DBBF6A4-1B7E-42FF-B1E8-ED5B9B96F914", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.5:rc3:*:*:*:*:*:*", "matchCriteriaId": "9B8FEFF8-CE07-47BB-BA28-7530646D6DF4", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "DECA643A-78C4-488B-B3BA-B022F8041883", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.0.0:beta1:*:*:*:*:*:*", "matchCriteriaId": "F23DF96E-3DF8-47F1-AE6A-95381F9C8A6A", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.0.0:beta2:*:*:*:*:*:*", "matchCriteriaId": "B05F5A1A-D69F-4E75-BC5E-BC920FD655BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.0.0:beta3:*:*:*:*:*:*", "matchCriteriaId": "0CB62426-3B0D-4B33-98E3-CB3FA259FCB9", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.0.0:beta4:*:*:*:*:*:*", "matchCriteriaId": "56C0D9C4-E770-4853-AABF-7374C053BD25", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.0.0:rc:*:*:*:*:*:*", "matchCriteriaId": "06C3FE47-D453-418B-8ABF-E5C7F3C59648", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "79EBCC0F-0389-4FD5-998F-BF634D49DEE6", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.1.0:beta:*:*:*:*:*:*", "matchCriteriaId": "E9D6CE25-C96B-46F1-A0D3-14F2A2B3E9FC", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.1.0:rc:*:*:*:*:*:*", "matchCriteriaId": "A07E12A0-CAE6-454A-8517-FA9D3A61E713", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.1.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "11F3EB35-F68F-4018-BB07-3CF95E402F32", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "F6765CEC-9CF6-418F-B9AF-08ABB9227F17", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.0:beta:*:*:*:*:*:*", "matchCriteriaId": "EF6C987D-267B-492E-B2AE-CE912655FF98", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.0:rc:*:*:*:*:*:*", "matchCriteriaId": "5BF512AE-BCD0-42D0-82FA-41A79744F3AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "537E450A-3464-4B72-8757-E9FCCB38CE7F", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.1:rc:*:*:*:*:*:*", "matchCriteriaId": "F206E728-E1A6-4396-9571-8E34E5C225EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "33391493-FAE2-4936-8D39-11B9FD6185B1", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "C4178258-E097-4087-AD4B-5351F6A91ACF", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.3.1:beta:*:*:*:*:*:*", "matchCriteriaId": "DBA4551E-C1D6-46CA-8B2E-E0EDA866FD2B", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "9B148BD6-B15A-4AC1-BAA5-C8EB8115F728", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.4:beta:*:*:*:*:*:*", "matchCriteriaId": "16B80786-726E-4F00-A302-D713F9F3D5CD", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "2713B9E6-3357-4D6A-9523-A1CDD212E37E", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3:*:*:*:*:*:*:*", "matchCriteriaId": "3458D6A1-2DD4-4C3A-9A3B-15EA4DE9AAB6", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3:beta:*:*:*:*:*:*", "matchCriteriaId": "7992D7EF-0F5D-482D-A22D-2A3D663387BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3:rc:*:*:*:*:*:*", "matchCriteriaId": "0C84AA0A-ACC3-41FD-83A2-504B00B4CDAA", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3:rc2:*:*:*:*:*:*", "matchCriteriaId": "262F3298-EED7-4A09-883B-801756433D4C", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "1487C37B-A9D1-4BF5-97DA-9CCBE3E49840", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3.1:beta:*:*:*:*:*:*", "matchCriteriaId": "B2525E76-1008-4BB2-88EB-214C75DA3986", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3.1:rc:*:*:*:*:*:*", "matchCriteriaId": "9DD84C1B-44D6-4DD2-95EB-E07AEA0492AB", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "36DF23A8-6D34-43D1-BB53-D404E291A89F", "vulnerable": true}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3.2:beta:*:*:*:*:*:*", "matchCriteriaId": "D78A5A94-EBD6-4677-8319-E747CFBD1572", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrary web script or HTML via an arbitrary ref_XXX parameter."}, {"lang": "es", "value": "Vulnerabilidad de XSS en Feng Office 2.3.2-rc y anteriores versiones permite a atacantes remotos inyectar script arbitrario o HTML a trav\u00e9s de un par\u00e1metro ref_XXX arbitrario."}], "id": "CVE-2013-5744", "lastModified": "2013-10-29T21:04:26.987", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2013-10-28T22:55:03.990", "references": [{"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://archives.neohapsis.com/archives/bugtraq/2013-10/0031.html"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "https://www.htbridge.com/advisory/HTB23174"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}