Skip to content
OpenAdvisories
Unscored CVE-2015-0896 EUVD-2015-0905GHSA-w93f-wmr5-rjc6

Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML…

Published Mar 18, 2015 · Updated Aug 6, 2024 · Assigned by jpcert

Package: extplorer Ecosystem: Ubuntu

Description

Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 7 extplorer 2.1.0b6+dfsg.3-4+deb7u2 DLA-453-1
Debian 6.0 extplorer 2.1.0b6+dfsg.2-1+squeeze3 DLA-296-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS extplorer 2.1.0b6+dfsg.3-4+deb7u3ubuntu0.1 —
Ubuntu 14.04 LTS extplorer 2.1.0b6+dfsg.3-4+deb7u3build0.14.04.1 —

Advisories 2

References