CVE-2013-7351

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the (1) showRSS, (2) showATOM, or (3) showDailyRSS function; a (4) file name to the importFile function; or (5) vectors related to bookmarks.

• CWE-79

• http://seclists.org/oss-sec/2014/q2/1Exploit, Mailing List, Patch, Third Party Advisory
• http://seclists.org/oss-sec/2014/q2/4Exploit, Mailing List, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92215Third Party Advisory, VDB Entry
• https://github.com/sebsauvage/Shaarli/commit/53da201749f8f362323ef278bf338f1d9f7a925aPatch, Third Party Advisory
• https://github.com/sebsauvage/Shaarli/issues/134Exploit, Third Party Advisory
• http://seclists.org/oss-sec/2014/q2/1Exploit, Mailing List, Patch, Third Party Advisory
• http://seclists.org/oss-sec/2014/q2/4Exploit, Mailing List, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92215Third Party Advisory, VDB Entry
• https://github.com/sebsauvage/Shaarli/commit/53da201749f8f362323ef278bf338f1d9f7a925aPatch, Third Party Advisory
• https://github.com/sebsauvage/Shaarli/issues/134Exploit, Third Party Advisory

Published

Jan 2, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-7345The BEGIN regular expression in the awk script detector in m…
• CVE-2013-7346Cross-site request forgery (CSRF) vulnerability in Symphony …
• CVE-2013-7347Luci in Red Hat Conga does not properly enforce the user ses…
• CVE-2013-7348Double free vulnerability in the ioctx_alloc function in fs/…
• CVE-2013-7349Multiple SQL injection vulnerabilities in Gnew 2013.1 allow …
• CVE-2013-7350Multiple unspecified vulnerabilities in Check Point Security…
• CVE-2013-7352Cross-site request forgery (CSRF) vulnerability in blogs/adm…
• CVE-2013-7353Integer overflow in the png_set_unknown_chunks function in l…6.5
• CVE-2013-7354Multiple integer overflows in libpng before 1.5.14rc03 allow…6.5
• CVE-2013-7355SQL injection vulnerability in SAP BI Universal Data Integra…
• CVE-2013-7356Unspecified vulnerability in the SAP CCMS / Database Monitor…
• CVE-2013-7357Unspecified vulnerability in the configuration service in SA…