CVE-2015-0870

Cross-site scripting (XSS) vulnerability in hb.cgi in Nishishi Factory Fumy News Clipper 2.x before 2.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://jvn.jp/en/jp/JVN33735535/995592/index.htmlVendor Advisory
• http://jvn.jp/en/jp/JVN33735535/index.htmlVendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000010Vendor Advisory
• http://www.nishishi.com/cgi/newsclip/20150130.htmlPatch, Vendor Advisory
• http://jvn.jp/en/jp/JVN33735535/995592/index.htmlVendor Advisory
• http://jvn.jp/en/jp/JVN33735535/index.htmlVendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000010Vendor Advisory
• http://www.nishishi.com/cgi/newsclip/20150130.htmlPatch, Vendor Advisory

Published

Feb 1, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0863GALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.a…
• CVE-2015-0864Samsung Account (AKA com.osp.app.signin) before 1.6.0069 and…
• CVE-2015-0866Multiple cross-site scripting (XSS) vulnerabilities in Zoho …
• CVE-2015-0867Directory traversal vulnerability in SYNCK GRAPHICA Download…
• CVE-2015-0868Unrestricted file upload vulnerability in Mrs. Shiromuku Per…
• CVE-2015-0869I-O DATA DEVICE NP-BBRM routers allow remote attackers to ca…
• CVE-2015-0871Cross-site scripting (XSS) vulnerability in Mrs. Shiromuku P…
• CVE-2015-0872Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-0873Cross-site scripting (XSS) vulnerability in Homepage Decorat…
• CVE-2015-0874Smartphone Passbook 1.0.0 does not verify X.509 certificates…
• CVE-2015-0875The Ogaki Kyoritsu Bank Smartphone Passbook application 1.0.…
• CVE-2015-0876Multiple cross-site scripting (XSS) vulnerabilities in the p…