CVE-2015-7383

Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge through 2015-04-28 allow remote attackers to inject arbitrary web script or HTML via the (1) adminUserName, (2) pathToMYSQL, (3) databaseStructureFile, or (4) pathToBibutils parameter to install.php or the (5) adminUserName parameter to update.php.

• CWE-79

• http://www.kb.cert.org/vuls/id/374092Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/374092Third Party Advisory, US Government Resource

Published

Sep 28, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7377Cross-site scripting (XSS) vulnerability in pie-register/pie…
• CVE-2015-7378Panda Security URL Filtering before 4.3.1.9 uses a weak ACL …7.8
• CVE-2015-7379Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-7380Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-7381Multiple PHP remote file inclusion vulnerabilities in instal…
• CVE-2015-7382SQL injection vulnerability in install.php in Web Reference …
• CVE-2015-7384Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to c…
• CVE-2015-7385Cross-site scripting (XSS) vulnerability in Open-Xchange OX …
• CVE-2015-7386Multiple cross-site scripting (XSS) vulnerabilities in inclu…
• CVE-2015-7387ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and ear…
• CVE-2015-7390SQL injection vulnerability in TestLink before 1.9.14 allows…
• CVE-2015-7391Multiple cross-site scripting (XSS) vulnerabilities in TestL…