opWebAPIPlugin Multiple XML External Entity Injection Vulnerabilities
BID:62289
Info
opWebAPIPlugin Multiple XML External Entity Injection Vulnerabilities
| Bugtraq ID: | 62289 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-4334 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 10 2013 12:00AM |
| Updated: | Sep 16 2013 12:11AM |
| Credit: | Kosuke Ebihara |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
opWebAPIPlugin Multiple XML External Entity Injection Vulnerabilities
opWebAPIPlugin is prone to multiple XML External Entity injection vulnerabilities.
Successfully exploiting these issues may allow an attacker to obtain potentially sensitive information or cause denial-of-service conditions. This may lead to further attacks.
opWebAPIPlugin is prone to multiple XML External Entity injection vulnerabilities.
Successfully exploiting these issues may allow an attacker to obtain potentially sensitive information or cause denial-of-service conditions. This may lead to further attacks.
Exploit / POC
opWebAPIPlugin Multiple XML External Entity Injection Vulnerabilities
An attacker can exploit these issues using a web browser.
An attacker can exploit these issues using a web browser.
Solution / Fix
opWebAPIPlugin Multiple XML External Entity Injection Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
opWebAPIPlugin Multiple XML External Entity Injection Vulnerabilities
References:
References: