1. Home
  2. CVE Database
  3. CVE-2013-4754
LOW · 3.5

CVE-2013-4754

Multiple cross-site scripting (XSS) vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Search field to browse.php or...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Search field to browse.php or (2) the Title field to prefs.php.

CVSS Score

3.5

LOW

AV:N/AC:M/Au:S/C:N/I:P/A:N
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE

Affected Products

VendorProductVersions
OwlIntranet Knowledgebase1.10

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2013-4754?

CVE-2013-4754 is a vulnerability with a CVSS score of 3.5 (LOW). Multiple cross-site scripting (XSS) vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Search field to browse.php or...

How severe is CVE-2013-4754?

CVE-2013-4754 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-4754?

Check the references section above for vendor advisories and patch information. Affected products include: Owl Intranet Knowledgebase.