CVE-2014-2710

Multiple cross-site scripting (XSS) vulnerabilities in Oliver (formerly Webshare) 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the (1) login page (index.php) or (2) login form (loginform-inc.php).

• CWE-79

• http://packetstormsecurity.com/files/136731/Oliver-1.3.0-1.3.1-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Apr/66Exploit, Mailing List, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/538132/100/0/threaded
• http://packetstormsecurity.com/files/136731/Oliver-1.3.0-1.3.1-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Apr/66Exploit, Mailing List, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/538132/100/0/threaded

Published

Apr 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-2689Cross-site scripting (XSS) vulnerability in Offiria 2.1.0 an…
• CVE-2014-2690Citrix VDI-in-a-Box 5.3.x before 5.3.6 and 5.4.x before 5.4.…
• CVE-2014-2706Race condition in the mac80211 subsystem in the Linux kernel…
• CVE-2014-2707cups-browsed in cups-filters 1.0.41 before 1.0.51 allows rem…
• CVE-2014-2708Multiple SQL injection vulnerabilities in graph_xport.php in…
• CVE-2014-2709lib/rrd.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remo…
• CVE-2014-2711Cross-site scripting (XSS) vulnerability in J-Web in Juniper…
• CVE-2014-2712Cross-site scripting (XSS) vulnerability in J-Web in Juniper…
• CVE-2014-2713Juniper Junos before 11.4R11, 12.1 before 12.1R9, 12.2 befor…
• CVE-2014-2714The Enhanced Web Filtering (EWF) in Juniper Junos before 10.…
• CVE-2014-2715Multiple cross-site scripting (XSS) vulnerabilities in vwroo…
• CVE-2014-2716Ekahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Tim…