CVE-2013-5913

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2013-10-08T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, Professional and Community Edition 4.7.x before 4.7.8, and Enterprise Edition 5.x before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via the searchrecomm parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://wiki.oxidforge.org/Security_bulletins/2013-001"}, {"name": "oxid-eshop-cve20135913-xss(87760)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87760"}, {"name": "62901", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/62901"}, {"name": "55193", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/55193"}, {"name": "98235", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/98235"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2013-5913", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, Professional and Community Edition 4.7.x before 4.7.8, and Enterprise Edition 5.x before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via the searchrecomm parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://wiki.oxidforge.org/Security_bulletins/2013-001", "refsource": "CONFIRM", "url": "http://wiki.oxidforge.org/Security_bulletins/2013-001"}, {"name": "oxid-eshop-cve20135913-xss(87760)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87760"}, {"name": "62901", "refsource": "BID", "url": "http://www.securityfocus.com/bid/62901"}, {"name": "55193", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/55193"}, {"name": "98235", "refsource": "OSVDB", "url": "http://osvdb.org/98235"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T17:29:41.171Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://wiki.oxidforge.org/Security_bulletins/2013-001"}, {"name": "oxid-eshop-cve20135913-xss(87760)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87760"}, {"name": "62901", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/62901"}, {"name": "55193", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/55193"}, {"name": "98235", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/98235"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2013-5913", "datePublished": "2013-10-15T15:00:00.000Z", "dateReserved": "2013-09-19T00:00:00.000Z", "dateUpdated": "2024-08-06T17:29:41.171Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:oxid-esales:eshop:*:*:*:*:*:*:*:*", "matchCriteriaId": "AE9C5630-2C41-4EB2-A6A4-F61FE2B957AE", "versionEndIncluding": "4.6.6", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "3DE5865B-A265-42D7-BFD0-310C554F6DB1", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "81D2CB2F-E93F-4F9D-99BE-1B430F72FFC0", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "EFD5460E-8235-4234-B1A5-F4842F65CD11", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "F393BDB8-7337-4EB8-B368-E018601FD503", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.6.4:*:*:*:*:*:*:*", "matchCriteriaId": "B8BD3E8D-8564-4F4E-926D-43870EF59666", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.6.5:*:*:*:*:*:*:*", "matchCriteriaId": "8BAE1D70-822F-4B6B-8BFD-0E5900C66DF8", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.0:*:*:*:community:*:*:*", "matchCriteriaId": "FA503436-DE08-458E-83E1-FF2D82A5E85B", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.0:*:*:*:professional:*:*:*", "matchCriteriaId": "4F8289FD-5873-46D4-887B-F0AD5CE651BA", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.1:*:*:*:community:*:*:*", "matchCriteriaId": "7966E2B6-817E-4DA6-A8EE-92BC51BAB344", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.1:*:*:*:professional:*:*:*", "matchCriteriaId": "600E8455-64CE-456B-9CC5-656F1D25157D", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.2:*:*:*:community:*:*:*", "matchCriteriaId": "8F3E6A10-CAB8-42D4-9DDF-D5004BEA7B0F", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.2:*:*:*:professional:*:*:*", "matchCriteriaId": "C822195C-A811-4515-8EFF-13EC1553BAF2", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.3:*:*:*:community:*:*:*", "matchCriteriaId": "AB1F5ADE-85A3-4258-98E6-C14109183B33", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.3:*:*:*:professional:*:*:*", "matchCriteriaId": "B444D305-1F76-4580-99CD-25C58DA3288D", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.4:*:*:*:community:*:*:*", "matchCriteriaId": "9BA4DA25-4B92-42E9-A746-99EF85E87A91", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.4:*:*:*:professional:*:*:*", "matchCriteriaId": "B113034B-D07E-4CD0-AF66-5F4947174534", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.5:*:*:*:community:*:*:*", "matchCriteriaId": "550436CB-6CA5-4398-B9EE-535106D297F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.5:*:*:*:professional:*:*:*", "matchCriteriaId": "5172A1E1-566E-498D-87DE-2E1A62ACE04C", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.6:*:*:*:community:*:*:*", "matchCriteriaId": "771BBA21-C841-4EA8-967B-C9057FF913C2", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.6:*:*:*:professional:*:*:*", "matchCriteriaId": "2B71186B-8FC0-434E-BF46-3AAB76719D44", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.7:*:*:*:community:*:*:*", "matchCriteriaId": "88C6DFA3-6920-40B2-9180-168A26A032C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.7:*:*:*:professional:*:*:*", "matchCriteriaId": "34F6F68F-816B-4DB5-92A1-C953424A5F7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.0:*:*:*:enterprise:*:*:*", "matchCriteriaId": "351D61AB-F4D1-405D-B157-1FB82A361AE6", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.1:*:*:*:enterprise:*:*:*", "matchCriteriaId": "2414B427-E6FD-4432-8742-322D40130F84", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.2:*:*:*:enterprise:*:*:*", "matchCriteriaId": "7D5EA970-9FAC-42CE-A4CB-7C7644575114", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.3:*:*:*:enterprise:*:*:*", "matchCriteriaId": "2FE4411A-5C9C-4AC8-AF72-E84F8BFED749", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.4:*:*:*:enterprise:*:*:*", "matchCriteriaId": "BD5614B8-C58D-4269-AF0E-70649271D766", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.5:*:*:*:enterprise:*:*:*", "matchCriteriaId": "F8FEC946-BB4E-45A2-ABCF-A32A3DCE531A", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.6:*:*:*:enterprise:*:*:*", "matchCriteriaId": "EE8F71C5-47CD-4420-8AD4-A52FD89FEAEF", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.7:*:*:*:enterprise:*:*:*", "matchCriteriaId": "73DA724A-6C57-45FF-805A-9530CD2AD6FE", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, Professional and Community Edition 4.7.x before 4.7.8, and Enterprise Edition 5.x before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via the searchrecomm parameter."}, {"lang": "es", "value": "Vulnerabilidad corss-site scripting (XSS) en la funci\u00f3n getRecommSearch en recommlist.php de OXID eShop anterior a 4.67, Professional y Community Edition 4.7.x anterior a 4.7.8, y Enterprise Edition 5.xd anterior a 5.0.8 permite a atacantes remotos inyectar web script o HTML de forma arbitraria a trav\u00e9s del par\u00e1metro searchrecomm."}], "id": "CVE-2013-5913", "lastModified": "2026-06-16T23:59:44.290", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2013-10-15T15:55:03.597", "references": [{"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://osvdb.org/98235"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/55193"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://wiki.oxidforge.org/Security_bulletins/2013-001"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/62901"}, {"source": "cve@mitre.org", "tags": ["VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87760"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://osvdb.org/98235"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/55193"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://wiki.oxidforge.org/Security_bulletins/2013-001"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/62901"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87760"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}