{"api_version":"1","generated_at":"2026-07-23T06:42:01+00:00","cve":"CVE-2015-2064","urls":{"html":"https://cve.report/CVE-2015-2064","api":"https://cve.report/api/cve/CVE-2015-2064.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2015-2064","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-2064"},"summary":{"title":"CVE-2015-2064","description":"Multiple cross-site scripting (XSS) vulnerabilities in DLGuard 5, 4.6, and 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) c, or (3) redirect parameter to index.php or (4) search field (searchTerm parameter) in the main page.","state":"PUBLISHED","assigner":"mitre","published_at":"2015-02-24 17:59:00","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/72684","name":"http://www.securityfocus.com/bid/72684","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"DLGuard Multiple Cross Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://tetraph.com/security/xss-vulnerability/dlguard-multiple-xss-cross-site-scripting-security-vulnerabilities/","name":"http://tetraph.com/security/xss-vulnerability/dlguard-multiple-xss-cross-site-scripting-security-vulnerabilities/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CVE-2015-2064 DLGuard Multiple XSS (Cross-Site Scripting) Security Vulnerabilities – Information Security - Tetraph","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://seclists.org/fulldisclosure/2015/Feb/66","name":"http://seclists.org/fulldisclosure/2015/Feb/66","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Full Disclosure: DLGuard Multiple XSS (Cross-Site Scripting) Security\tVulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityrelated.blogspot.com/2015/02/dlguard-multiple-xss-cross-site.html","name":"http://securityrelated.blogspot.com/2015/02/dlguard-multiple-xss-cross-site.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IT Information Security -  Computer & Web & Database & Application Related : CVE-2015-2064 - DLGuard Multiple XSS (Cross-Site Scripting) Web Security 0Day Bugs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2064","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2064","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2015","cve_id":"2064","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dlguard","cpe5":"dlguard","cpe6":"4.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"2064","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dlguard","cpe5":"dlguard","cpe6":"4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"2064","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dlguard","cpe5":"dlguard","cpe6":"5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T05:02:43.305Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://tetraph.com/security/xss-vulnerability/dlguard-multiple-xss-cross-site-scripting-security-vulnerabilities/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://securityrelated.blogspot.com/2015/02/dlguard-multiple-xss-cross-site.html"},{"name":"72684","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/72684"},{"name":"20150218 DLGuard Multiple XSS (Cross-Site Scripting) Security Vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://seclists.org/fulldisclosure/2015/Feb/66"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2015-02-18T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in DLGuard 5, 4.6, and 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) c, or (3) redirect parameter to index.php or (4) search field (searchTerm parameter) in the main page."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2016-12-29T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://tetraph.com/security/xss-vulnerability/dlguard-multiple-xss-cross-site-scripting-security-vulnerabilities/"},{"tags":["x_refsource_MISC"],"url":"http://securityrelated.blogspot.com/2015/02/dlguard-multiple-xss-cross-site.html"},{"name":"72684","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/72684"},{"name":"20150218 DLGuard Multiple XSS (Cross-Site Scripting) Security Vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://seclists.org/fulldisclosure/2015/Feb/66"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2015-2064","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in DLGuard 5, 4.6, and 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) c, or (3) redirect parameter to index.php or (4) search field (searchTerm parameter) in the main page."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://tetraph.com/security/xss-vulnerability/dlguard-multiple-xss-cross-site-scripting-security-vulnerabilities/","refsource":"MISC","url":"http://tetraph.com/security/xss-vulnerability/dlguard-multiple-xss-cross-site-scripting-security-vulnerabilities/"},{"name":"http://securityrelated.blogspot.com/2015/02/dlguard-multiple-xss-cross-site.html","refsource":"MISC","url":"http://securityrelated.blogspot.com/2015/02/dlguard-multiple-xss-cross-site.html"},{"name":"72684","refsource":"BID","url":"http://www.securityfocus.com/bid/72684"},{"name":"20150218 DLGuard Multiple XSS (Cross-Site Scripting) Security Vulnerabilities","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2015/Feb/66"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2015-2064","datePublished":"2015-02-24T17:00:00.000Z","dateReserved":"2015-02-24T00:00:00.000Z","dateUpdated":"2024-08-06T05:02:43.305Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2015-02-24 17:59:00","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dlguard:dlguard:4.5:*:*:*:*:*:*:*","matchCriteriaId":"0DA1AF44-C7C9-4230-862F-38DE2894DACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dlguard:dlguard:4.6:*:*:*:*:*:*:*","matchCriteriaId":"6F15209E-AF24-492C-B702-FA829E5A6D6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dlguard:dlguard:5.0:*:*:*:*:*:*:*","matchCriteriaId":"55532768-0149-4C68-984C-1D4B982EB260"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2015","CveId":"2064","Ordinal":"1","Title":"CVE-2015-2064","CVE":"CVE-2015-2064","Year":"2015"},"notes":[{"CveYear":"2015","CveId":"2064","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in DLGuard 5, 4.6, and 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) c, or (3) redirect parameter to index.php or (4) search field (searchTerm parameter) in the main page.","Type":"Description","Title":"CVE-2015-2064"},{"CveYear":"2015","CveId":"2064","Ordinal":"2","NoteData":"2015-02-24","Type":"Other","Title":"Published"},{"CveYear":"2015","CveId":"2064","Ordinal":"3","NoteData":"2016-12-29","Type":"Other","Title":"Modified"}]}}}