Skip to content
OpenAdvisories
Unscored CVE-2016-7813 EUVD-2016-8662GHSA-x4q5-6v5x-73cq

Cross-site scripting vulnerability in DERAEMON-CMS version 0.8.9 and earlier allows remote attackers to inject arbitrary web script or HTML…

Published Jun 9, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Vendor: TEAM DERAEMONS Product: DERAEMON-CMS

Description

Cross-site scripting vulnerability in DERAEMON-CMS version 0.8.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the parameters hostname, database and username.

Affected products

VendorProductAffectedFixed
TEAM DERAEMONS DERAEMON-CMS version 0.8.9 and earlier —

References