Unscored CVE-2013-0708 EUVD-2013-0719GHSA-wf8w-r28v-wfxm

Cross-site scripting (XSS) vulnerability in dopvCOMET* 0009b allows remote attackers to inject arbitrary web script or HTML via the HTTP Re…

Published Mar 1, 2013 · Updated Sep 16, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in dopvCOMET* 0009b allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled during display of the access log.

References

JVN#64756004 third-party-advisory
http://tech.bayashi.net/dc/
JVNDB-2013-000013 third-party-advisory