Skip to content
OpenAdvisories
Unscored CVE-2015-6011 EUVD-2015-5954GHSA-q338-298g-jhh7

Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allows remote attackers to conduct XML injection att…

Published Sep 28, 2015 · Updated Aug 6, 2024 · Assigned by certcc

Description

Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allows remote attackers to conduct XML injection attacks via (1) the id parameter to unapi.php or (2) the stylesheet parameter to sru.php.

References