Home > Vulnerability Database > CVE-2013-4620

WhiteSource Vulnerability Database

CVE-2013-4620

Good to know:

Date: August 9, 2013

Cross-site scripting (XSS) vulnerability in interface/main/onotes/office_comments_full.php in OpenEMR 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the note parameter.

Language: PHP

Severity Score

4.3

Related Resources (5)

Url: http://secunia.com/advisories/54083

Url: https://www.trustwave.com/spiderlabs/advisories/TWSL2013-018.txt

Url: http://sourceforge.net/p/openemr/discussion/202506/thread/4854b2b1/#9658

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-4620

Url: https://www.whitesourcesoftware.com/vulnerability-database/CVE-2013-4620

Severity Score

4.3

Weakness Type (CWE)

Cross-Site Scripting (XSS)

CWE-79

Top Fix

Upgrade Version

Upgrade to version v4_1_2

Learn More

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

WhiteSource Vulnerability Database

We found results for “”

CVE-2013-4620

Good to know:

Date: August 9, 2013

Language: PHP

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?