Unscored CVE-2014-2710 EUVD-2014-2738GHSA-h25m-p8vh-j2r3

Multiple cross-site scripting (XSS) vulnerabilities in Oliver (formerly Webshare) 1.3.1 and earlier allow remote attackers to inject arbitr…

Published Apr 13, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in Oliver (formerly Webshare) 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the (1) login page (index.php) or (2) login form (loginform-inc.php).

References

20160420 Multiple Reflected XSS vulnerabilities in Oliver (formerly Webshare) v1.3.1 mailing-list
20160419 Multiple Reflected XSS vulnerabilities in Oliver (formerly Webshare) v1.3.1 mailing-list
http://packetstormsecurity.com/files/136731/Oliver-1.3.0-1.3.1-Cross-Site-Scripting.html