CVE-2013-7368
Last modified
CVE-2013-7368 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in Gnew 2013.1 allow remote attackers to inject arbitrary web script or HTML via the gnew_template parameter to (1) users/profile.php, (2) articles/index.php, or (3) admin/polls.php; (4) category_id parameter to news/submit.php; news_id parameter to (5) news/send.php or (6) comments/add.php; or (7) post_subject or (8) thread_id parameter to posts/edit.php.. EPSS estimates a 3.22% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Gnew 2013.1 allow remote attackers to inject arbitrary web script or HTML via the gnew_template parameter to (1) users/profile.php, (2) articles/index.php, or (3) admin/polls.php; (4) category_id parameter to news/submit.php; news_id parameter to (5) news/send.php or (6) comments/add.php; or (7) post_subject or (8) thread_id parameter to posts/edit.php.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Raoul Proenca | Gnew | 2013.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-7368?
How severe is CVE-2013-7368?
How do I fix CVE-2013-7368?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-7362An unspecified RFC function in SAP CCMS Agent allows remote …
- CVE-2013-7363Unspecified vulnerability in the Diagnostics (SMD) agent in …
- CVE-2013-7364An unspecified J2EE core service in the J2EE Engine in SAP N…
- CVE-2013-7365Cross-site scripting (XSS) vulnerability in SAP Enterprise P…
- CVE-2013-7366The SAP Software Deployment Manager (SDM), in certain unspec…
- CVE-2013-7367SAP Enterprise Portal does not properly restrict access to t…
- CVE-2013-7369SQL injection vulnerability in an unspecified DLL in the FSD…
- CVE-2013-7370node-connect before 2.8.1 has XSS in the Sencha Labs Connect…6.1
- CVE-2013-7371node-connects before 2.8.2 has cross site scripting in Sench…6.1
- CVE-2013-7372The engineNextBytes function in classlib/modules/security/sr…
- CVE-2013-7373Android before 4.4 does not properly arrange for seeding of …
- CVE-2013-7374The Ubuntu Date and Time Indicator (aka indicator-datetime) …
Are you affected by CVE-2013-7368?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST