{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2013-10-08T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, Professional and Community Edition 4.7.x before 4.7.8, and Enterprise Edition 5.x before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via the searchrecomm parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://wiki.oxidforge.org/Security_bulletins/2013-001"}, {"name": "oxid-eshop-cve20135913-xss(87760)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87760"}, {"name": "62901", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/62901"}, {"name": "55193", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/55193"}, {"name": "98235", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/98235"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2013-5913", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, Professional and Community Edition 4.7.x before 4.7.8, and Enterprise Edition 5.x before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via the searchrecomm parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://wiki.oxidforge.org/Security_bulletins/2013-001", "refsource": "CONFIRM", "url": "http://wiki.oxidforge.org/Security_bulletins/2013-001"}, {"name": "oxid-eshop-cve20135913-xss(87760)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87760"}, {"name": "62901", "refsource": "BID", "url": "http://www.securityfocus.com/bid/62901"}, {"name": "55193", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/55193"}, {"name": "98235", "refsource": "OSVDB", "url": "http://osvdb.org/98235"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T17:29:41.171Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://wiki.oxidforge.org/Security_bulletins/2013-001"}, {"name": "oxid-eshop-cve20135913-xss(87760)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87760"}, {"name": "62901", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/62901"}, {"name": "55193", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/55193"}, {"name": "98235", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/98235"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2013-5913", "datePublished": "2013-10-15T15:00:00", "dateReserved": "2013-09-19T00:00:00", "dateUpdated": "2024-08-06T17:29:41.171Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:oxid-esales:eshop:*:*:*:*:*:*:*:*", "matchCriteriaId": "AE9C5630-2C41-4EB2-A6A4-F61FE2B957AE", "versionEndIncluding": "4.6.6", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "3DE5865B-A265-42D7-BFD0-310C554F6DB1", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "81D2CB2F-E93F-4F9D-99BE-1B430F72FFC0", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "EFD5460E-8235-4234-B1A5-F4842F65CD11", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "F393BDB8-7337-4EB8-B368-E018601FD503", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.6.4:*:*:*:*:*:*:*", "matchCriteriaId": "B8BD3E8D-8564-4F4E-926D-43870EF59666", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.6.5:*:*:*:*:*:*:*", "matchCriteriaId": "8BAE1D70-822F-4B6B-8BFD-0E5900C66DF8", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.0:*:*:*:community:*:*:*", "matchCriteriaId": "FA503436-DE08-458E-83E1-FF2D82A5E85B", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.0:*:*:*:professional:*:*:*", "matchCriteriaId": "4F8289FD-5873-46D4-887B-F0AD5CE651BA", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.1:*:*:*:community:*:*:*", "matchCriteriaId": "7966E2B6-817E-4DA6-A8EE-92BC51BAB344", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.1:*:*:*:professional:*:*:*", "matchCriteriaId": "600E8455-64CE-456B-9CC5-656F1D25157D", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.2:*:*:*:community:*:*:*", "matchCriteriaId": "8F3E6A10-CAB8-42D4-9DDF-D5004BEA7B0F", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.2:*:*:*:professional:*:*:*", "matchCriteriaId": "C822195C-A811-4515-8EFF-13EC1553BAF2", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.3:*:*:*:community:*:*:*", "matchCriteriaId": "AB1F5ADE-85A3-4258-98E6-C14109183B33", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.3:*:*:*:professional:*:*:*", "matchCriteriaId": "B444D305-1F76-4580-99CD-25C58DA3288D", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.4:*:*:*:community:*:*:*", "matchCriteriaId": "9BA4DA25-4B92-42E9-A746-99EF85E87A91", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.4:*:*:*:professional:*:*:*", "matchCriteriaId": "B113034B-D07E-4CD0-AF66-5F4947174534", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.5:*:*:*:community:*:*:*", "matchCriteriaId": "550436CB-6CA5-4398-B9EE-535106D297F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.5:*:*:*:professional:*:*:*", "matchCriteriaId": "5172A1E1-566E-498D-87DE-2E1A62ACE04C", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.6:*:*:*:community:*:*:*", "matchCriteriaId": "771BBA21-C841-4EA8-967B-C9057FF913C2", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.6:*:*:*:professional:*:*:*", "matchCriteriaId": "2B71186B-8FC0-434E-BF46-3AAB76719D44", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.7:*:*:*:community:*:*:*", "matchCriteriaId": "88C6DFA3-6920-40B2-9180-168A26A032C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:4.7.7:*:*:*:professional:*:*:*", "matchCriteriaId": "34F6F68F-816B-4DB5-92A1-C953424A5F7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.0:*:*:*:enterprise:*:*:*", "matchCriteriaId": "351D61AB-F4D1-405D-B157-1FB82A361AE6", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.1:*:*:*:enterprise:*:*:*", "matchCriteriaId": "2414B427-E6FD-4432-8742-322D40130F84", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.2:*:*:*:enterprise:*:*:*", "matchCriteriaId": "7D5EA970-9FAC-42CE-A4CB-7C7644575114", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.3:*:*:*:enterprise:*:*:*", "matchCriteriaId": "2FE4411A-5C9C-4AC8-AF72-E84F8BFED749", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.4:*:*:*:enterprise:*:*:*", "matchCriteriaId": "BD5614B8-C58D-4269-AF0E-70649271D766", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.5:*:*:*:enterprise:*:*:*", "matchCriteriaId": "F8FEC946-BB4E-45A2-ABCF-A32A3DCE531A", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.6:*:*:*:enterprise:*:*:*", "matchCriteriaId": "EE8F71C5-47CD-4420-8AD4-A52FD89FEAEF", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxid-esales:eshop:5.0.7:*:*:*:enterprise:*:*:*", "matchCriteriaId": "73DA724A-6C57-45FF-805A-9530CD2AD6FE", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, Professional and Community Edition 4.7.x before 4.7.8, and Enterprise Edition 5.x before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via the searchrecomm parameter."}, {"lang": "es", "value": "Vulnerabilidad corss-site scripting (XSS) en la funci\u00f3n getRecommSearch en recommlist.php de OXID eShop anterior a 4.67, Professional y Community Edition 4.7.x anterior a 4.7.8, y Enterprise Edition 5.xd anterior a 5.0.8 permite a atacantes remotos inyectar web script o HTML de forma arbitraria a trav\u00e9s del par\u00e1metro searchrecomm."}], "id": "CVE-2013-5913", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": true}]}, "published": "2013-10-15T15:55:03.597", "references": [{"source": "[email protected]", "tags": ["Broken Link"], "url": "http://osvdb.org/98235"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/55193"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://wiki.oxidforge.org/Security_bulletins/2013-001"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/62901"}, {"source": "[email protected]", "tags": ["VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87760"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://osvdb.org/98235"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/55193"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://wiki.oxidforge.org/Security_bulletins/2013-001"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/62901"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87760"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "[email protected]", "type": "Primary"}]}

{}