CVE-2013-5005
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2013-5005
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in ajaxRequest/methodCall.do in Tripwire Enterprise 8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) m_target_class_name, (2) m_target_method_name, or (3) m_request_context_params parameters.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Tripwire Enterprise 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Tripwire Enterprise是美国Tripwire公司的一套网络数据信息完整性安全保护软件。该软件能够监控各种平台的服务器、网络设备、应用软件中的文件数据和配置信息的变化，并通过邮件或者短信方式通知系统管理员进行处理。 Tripwire Enterprise 8.2及之前的版本中的ajaxRequest/methodCall.do文件中存在跨站脚本漏洞。远程攻击者可借助‘m_target_class_name’，‘m_target_method_name’或‘m_request_context_
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2013-5005
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-5005
请登录查看更多情报信息。
- 🔗 http://www.zerodaylab.com/zdl-advisories/2013-5005.htmlx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2013-5005
Same Patch Batch · n/a · 2014-01-29 · 23 CVEs total
| CVE-2014-1683 | Iconify SkyBlueCanvas‘index.php’格式化字符串漏洞 | |
| CVE-2014-0810 | JustSystems Sanshiro 安全漏洞 | |
| CVE-2013-6931 | Cybozu Garoon API SQL注入漏洞 | |
| CVE-2013-6930 | Cybozu Garoon page-navigation SQL注入漏洞 | |
| CVE-2013-6749 | IBM Lotus Quickr qp2.cab文件缓冲区溢出漏洞 | |
| CVE-2013-6748 | IBM Lotus Quickr qp2.cab文件缓冲区溢出漏洞 | |
| CVE-2013-2974 | IBM Tivoli Application Dependency Discovery Manager 权限许可和访问控制漏洞 | |
| CVE-2014-1692 | OpenSSH‘hash_buffer’函数缓冲区错误漏洞 | |
| CVE-2014-0682 | Cisco WebEx Meetings Server 权限许可和访问控制漏洞 | |
| CVE-2014-0681 | Cisco ISE 跨站脚本漏洞 | |
| CVE-2014-0680 | Cisco ISE NAC Web Agent 跨站脚本漏洞 | |
| CVE-2012-6086 | Zabbix ‘cURL’ API加密问题漏洞 | |
| CVE-2013-7318 | AlgoSec Firewall Analyzer 跨站脚本漏洞 | |
| CVE-2013-6141 | op5 Monitor 安全漏洞 | |
| CVE-2013-5092 | AlgoSec Firewall Analyzer 跨站脚本漏洞 | |
| CVE-2013-4898 | SocialEngine TimeLine插件权限许可和访问控制漏洞 | |
| CVE-2013-4889 | Spring Signage Xibo 跨站请求伪造漏洞 | |
| CVE-2013-4888 | Spring Signage Xibo ’layout‘参数跨站脚本漏洞 | |
| CVE-2013-4887 | Spring Signage Xibo ‘displayid’参数SQL注入漏洞 | |
| CVE-2013-4662 | CiviCRM SQL注入漏洞 |
Showing top 20 of 23 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2013-5005
No comments yet