CVE-2013-4889 - CVE House
Back to Database
Status published Medium CVE-2013-4889

Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital...

Vulnerability Description

Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital Signage Xibo 1.4.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add a new administrator via the AddUser action or (2) conduct cross-site scripting (XSS) attacks, as demonstrated by CVE-2013-4888.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-4889

Credits & Attribution

No credits recorded in the NVD database.

References

More from xibosignage

View All →
CVE-2025-62369
Xibo CMS: Remote Code Execution through module templates
High 7.2
CVE-2024-43413
Xibo CMS XSS vulnerability using DataSet HTML columns
Low 3.5
CVE-2024-43412
Xibo CMS XSS vulnerability when previewing files uploaded to the library containing HTML/JS
Medium 4.6
CVE-2024-41944
Sensitive Information Disclosure abusing SQL Injection in Xibo CMS proof of play report
Medium 6.5
CVE-2024-41804
Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Column Formula
Medium 6.5

Affected Vendor

xibosignage

View all reports →

Affected Software

xibo
Vulnerable Versions:
1.4.2

Timeline

Official Publish: January 29th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.