CVE-2013-5108
NONE EPSS 70.2%
Published Dec 5, 201312y ago · Modified Jun 16, 20262w ago
Published Dec 5, 2013 12y ago
Last Modified Jun 16, 2026 2w ago
Description
Multiple cross-site scripting (XSS) vulnerabilities in the xn function in RockMongo 1.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) db parameter on the login page or (2) username parameter in a login.index action to index.php and other unspecified parameters.
Threat Intelligence
EPSS Exploit Probability
70.2% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-79 Cross-site Scripting Injection
Affected Products 18
| Vendor | Product | Version | Range |
|---|---|---|---|
| rockmongo | rockmongo | * | ≤1.1.5 |
| rockmongo | rockmongo | 1.0 | any |
| rockmongo | rockmongo | 1.0.1 | any |
| rockmongo | rockmongo | 1.0.2 | any |
| rockmongo | rockmongo | 1.0.3 | any |
| rockmongo | rockmongo | 1.0.4 | any |
| rockmongo | rockmongo | 1.0.5 | any |
| rockmongo | rockmongo | 1.0.6 | any |
| rockmongo | rockmongo | 1.0.7 | any |
| rockmongo | rockmongo | 1.0.8 | any |
| rockmongo | rockmongo | 1.0.9 | any |
| rockmongo | rockmongo | 1.0.10 | any |
| rockmongo | rockmongo | 1.0.11 | any |
| rockmongo | rockmongo | 1.0.12 | any |
| rockmongo | rockmongo | 1.1.1 | any |
| rockmongo | rockmongo | 1.1.2 | any |
| rockmongo | rockmongo | 1.1.3 | any |
| rockmongo | rockmongo | 1.1.4 | any |
References 3
- secunia.com http://secunia.com/advisories/55756
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/89366
- trustwave.com https://www.trustwave.com/spiderlabs/advisories/TWSL2013-026.txt
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.