CVE-2013-2309

Published: Jun 17, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the management screen in OpenPNE 3.4.x before 3.4.21.1, 3.6.x before 3.6.9.1, and 3.8.x before 3.8.5.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving the "mobile version color scheme."

Affected (51)

Products: Tejimaya: Openpne

Tejimaya

1 product

Openpne

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Tejimaya Openpne	Version 3.4.0.1
Tejimaya Openpne	Version 3.4.0
Tejimaya Openpne	Version 3.4.1.1
Tejimaya Openpne	Version 3.4.10
Tejimaya Openpne	Version 3.4.11.1
Tejimaya Openpne	Version 3.4.11
Tejimaya Openpne	Version 3.4.12.1
Tejimaya Openpne	Version 3.4.12
Tejimaya Openpne	Version 3.4.13
Tejimaya Openpne	Version 3.4.14.1
Tejimaya Openpne	Version 3.4.14
Tejimaya Openpne	Version 3.4.15.1
Tejimaya Openpne	Version 3.4.15
Tejimaya Openpne	Version 3.4.16
Tejimaya Openpne	Version 3.4.17
Tejimaya Openpne	Version 3.4.18
Tejimaya Openpne	Version 3.4.19
Tejimaya Openpne	Version 3.4.1
Tejimaya Openpne	Version 3.4.21
Tejimaya Openpne	Version 3.4.2
Tejimaya Openpne	Version 3.4.3
Tejimaya Openpne	Version 3.4.4.1
Tejimaya Openpne	Version 3.4.4
Tejimaya Openpne	Version 3.4.5
Tejimaya Openpne	Version 3.4.6.1
Tejimaya Openpne	Version 3.4.6.2
Tejimaya Openpne	Version 3.4.6
Tejimaya Openpne	Version 3.4.7
Tejimaya Openpne	Version 3.4.8
Tejimaya Openpne	Version 3.4.9.1
Tejimaya Openpne	Version 3.4.9.2
Tejimaya Openpne	Version 3.4.9
Tejimaya Openpne	Version 3.4 rc1
Tejimaya Openpne	Version 3.4b

Configuration B

10 vulnerable

Vulnerable Software	Affected Versions
Tejimaya Openpne	Version 3.6.0
Tejimaya Openpne	Version 3.6.1
Tejimaya Openpne	Version 3.6.2
Tejimaya Openpne	Version 3.6.3
Tejimaya Openpne	Version 3.6.4
Tejimaya Openpne	Version 3.6.5
Tejimaya Openpne	Version 3.6.6
Tejimaya Openpne	Version 3.6.7
Tejimaya Openpne	Version 3.6.8
Tejimaya Openpne	Version 3.6.9

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Tejimaya Openpne	Version 3.8.0
Tejimaya Openpne	Version 3.8.1
Tejimaya Openpne	Version 3.8.2
Tejimaya Openpne	Version 3.8.3
Tejimaya Openpne	Version 3.8.4
Tejimaya Openpne	Version 3.8.5
Tejimaya Openpne	Version 3.8.6