CVE-2015-6010 - CVE House
Back to Database
Status published Medium CVE-2015-6010

Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allow remote attackers to inject arbitrary web script or HTML via the (1) errorNo or (2) errorMsg parameter to error.php; the (3) viewType parameter to duplicate_manager.php; the (4) queryAction, (5) displayType, (6) citeOrder, (7) sqlQuery, (8) showQuery, (9) showLinks, (10) showRows, or (11) queryID parameter to query_manager.php; the (12) sourceText or (13) sourceIDs parameter to import.php; or the (14) typeName or (15) fileName parameter to modify.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-6010

Credits & Attribution

No credits recorded in the NVD database.

References

More from refbase

View All →
CVE-2015-7383
Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka...
Medium 4.3
CVE-2015-7382
SQL injection vulnerability in install.php in Web Reference Database (aka...
High 7.5
CVE-2015-7381
Multiple PHP remote file inclusion vulnerabilities in install.php in Web...
High 7.5
CVE-2015-6012
Multiple open redirect vulnerabilities in Web Reference Database (aka refbase)...
Medium 5.8
CVE-2015-6011
Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before...
Medium 5

Affected Vendor

Affected Software

refbase
Vulnerable Versions:
0

Timeline

Official Publish: September 28th, 2015
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.