ByteOS Network

NVD Vulnerability Details :

CVE-2013-7303

Deferred

Source-security@debian.org

Published At-30 Jan, 2014 | 21:55

Updated At-11 Apr, 2025 | 00:51

Multiple cross-site scripting (XSS) vulnerabilities in (1) squelettes-dist/formulaires/inscription.php and (2) prive/forms/editer_auteur.php in SPIP before 2.1.25 and 3.0.x before 3.0.13 allow remote attackers to inject arbitrary web script or HTML via the author name field.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

spip>>spip>>Versions up to 2.1.24(inclusive)

cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*

spip>>spip>>2.0.1

cpe:2.3:a:spip:spip:2.0.1:*:*:*:*:*:*:*

spip>>spip>>2.0.2

cpe:2.3:a:spip:spip:2.0.2:*:*:*:*:*:*:*

spip>>spip>>2.0.3

cpe:2.3:a:spip:spip:2.0.3:*:*:*:*:*:*:*

spip>>spip>>2.0.4

cpe:2.3:a:spip:spip:2.0.4:*:*:*:*:*:*:*

spip>>spip>>2.0.5

cpe:2.3:a:spip:spip:2.0.5:*:*:*:*:*:*:*

spip>>spip>>2.0.6

cpe:2.3:a:spip:spip:2.0.6:*:*:*:*:*:*:*

spip>>spip>>2.0.7

cpe:2.3:a:spip:spip:2.0.7:*:*:*:*:*:*:*

spip>>spip>>2.0.8

cpe:2.3:a:spip:spip:2.0.8:*:*:*:*:*:*:*

spip>>spip>>2.0.9

cpe:2.3:a:spip:spip:2.0.9:*:*:*:*:*:*:*

spip>>spip>>2.0.10

cpe:2.3:a:spip:spip:2.0.10:*:*:*:*:*:*:*

spip>>spip>>2.0.11

cpe:2.3:a:spip:spip:2.0.11:*:*:*:*:*:*:*

spip>>spip>>2.0.12

cpe:2.3:a:spip:spip:2.0.12:*:*:*:*:*:*:*

spip>>spip>>2.0.13

cpe:2.3:a:spip:spip:2.0.13:*:*:*:*:*:*:*

spip>>spip>>2.0.14

cpe:2.3:a:spip:spip:2.0.14:*:*:*:*:*:*:*

spip>>spip>>2.0.15

cpe:2.3:a:spip:spip:2.0.15:*:*:*:*:*:*:*

spip>>spip>>2.0.16

cpe:2.3:a:spip:spip:2.0.16:*:*:*:*:*:*:*

spip>>spip>>2.0.17

cpe:2.3:a:spip:spip:2.0.17:*:*:*:*:*:*:*

spip>>spip>>2.0.18

cpe:2.3:a:spip:spip:2.0.18:*:*:*:*:*:*:*

spip>>spip>>2.0.19

cpe:2.3:a:spip:spip:2.0.19:*:*:*:*:*:*:*

spip>>spip>>2.0.20

cpe:2.3:a:spip:spip:2.0.20:*:*:*:*:*:*:*

spip>>spip>>2.0.21

cpe:2.3:a:spip:spip:2.0.21:*:*:*:*:*:*:*

spip>>spip>>2.0.22

cpe:2.3:a:spip:spip:2.0.22:*:*:*:*:*:*:*

spip>>spip>>2.1

cpe:2.3:a:spip:spip:2.1:*:*:*:*:*:*:*

spip>>spip>>2.1.1

cpe:2.3:a:spip:spip:2.1.1:*:*:*:*:*:*:*

spip>>spip>>2.1.2

cpe:2.3:a:spip:spip:2.1.2:*:*:*:*:*:*:*

spip>>spip>>2.1.10

cpe:2.3:a:spip:spip:2.1.10:*:*:*:*:*:*:*

spip>>spip>>2.1.11

cpe:2.3:a:spip:spip:2.1.11:*:*:*:*:*:*:*

spip>>spip>>2.1.12

cpe:2.3:a:spip:spip:2.1.12:*:*:*:*:*:*:*

spip>>spip>>2.1.13

cpe:2.3:a:spip:spip:2.1.13:*:*:*:*:*:*:*

spip>>spip>>2.1.14

cpe:2.3:a:spip:spip:2.1.14:*:*:*:*:*:*:*

spip>>spip>>2.1.15

cpe:2.3:a:spip:spip:2.1.15:*:*:*:*:*:*:*

spip>>spip>>2.1.16

cpe:2.3:a:spip:spip:2.1.16:*:*:*:*:*:*:*

spip>>spip>>2.1.17

cpe:2.3:a:spip:spip:2.1.17:*:*:*:*:*:*:*

spip>>spip>>2.1.18

cpe:2.3:a:spip:spip:2.1.18:*:*:*:*:*:*:*

spip>>spip>>2.1.19

cpe:2.3:a:spip:spip:2.1.19:*:*:*:*:*:*:*

spip>>spip>>2.1.20

cpe:2.3:a:spip:spip:2.1.20:*:*:*:*:*:*:*

spip>>spip>>2.1.21

cpe:2.3:a:spip:spip:2.1.21:*:*:*:*:*:*:*

spip>>spip>>2.1.22

cpe:2.3:a:spip:spip:2.1.22:*:*:*:*:*:*:*

spip>>spip>>2.1.23

cpe:2.3:a:spip:spip:2.1.23:*:*:*:*:*:*:*

spip>>spip>>3.0.0

cpe:2.3:a:spip:spip:3.0.0:*:*:*:*:*:*:*

spip>>spip>>3.0.1

cpe:2.3:a:spip:spip:3.0.1:*:*:*:*:*:*:*

spip>>spip>>3.0.2

cpe:2.3:a:spip:spip:3.0.2:*:*:*:*:*:*:*

spip>>spip>>3.0.3

cpe:2.3:a:spip:spip:3.0.3:*:*:*:*:*:*:*

spip>>spip>>3.0.4

cpe:2.3:a:spip:spip:3.0.4:*:*:*:*:*:*:*

spip>>spip>>3.0.5

cpe:2.3:a:spip:spip:3.0.5:*:*:*:*:*:*:*

spip>>spip>>3.0.6

cpe:2.3:a:spip:spip:3.0.6:*:*:*:*:*:*:*

spip>>spip>>3.0.7

cpe:2.3:a:spip:spip:3.0.7:*:*:*:*:*:*:*

spip>>spip>>3.0.8

cpe:2.3:a:spip:spip:3.0.8:*:*:*:*:*:*:*

spip>>spip>>3.0.9

cpe:2.3:a:spip:spip:3.0.9:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

CWE ID: CWE-79

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://core.spip.org/projects/spip/repository/revisions/20902	security@debian.org	N/A
http://seclists.org/oss-sec/2014/q1/123	security@debian.org	N/A
http://seclists.org/oss-sec/2014/q1/128	security@debian.org	N/A
http://secunia.com/advisories/56381	security@debian.org	N/A
http://www.securitytracker.com/id/1029703	security@debian.org	N/A
http://www.spip.net/fr_article5648.html	security@debian.org	N/A
http://www.spip.net/fr_article5665.html	security@debian.org	N/A
http://zone.spip.org/trac/spip-zone/changeset/77768	security@debian.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/90643	security@debian.org	N/A
http://core.spip.org/projects/spip/repository/revisions/20902	af854a3a-2127-422b-91ae-364da2661108	N/A
http://seclists.org/oss-sec/2014/q1/123	af854a3a-2127-422b-91ae-364da2661108	N/A
http://seclists.org/oss-sec/2014/q1/128	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/56381	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1029703	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.spip.net/fr_article5648.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.spip.net/fr_article5665.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://zone.spip.org/trac/spip-zone/changeset/77768	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/90643	af854a3a-2127-422b-91ae-364da2661108	N/A