CVE-2014-2024

Published: Mar 14, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in classes/controller/error.php in Open Classifieds 2 before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to shared-apartments-rooms/.

Affected (12)

Products: Openclassifieds: Open Classifieds 2

Openclassifieds

1 product

Open Classifieds 2

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Openclassifieds Open Classifieds 2	version ≤ 2.1.2
Openclassifieds Open Classifieds 2	Version 2.0.1
Openclassifieds Open Classifieds 2	Version 2.0.2
Openclassifieds Open Classifieds 2	Version 2.0.3
Openclassifieds Open Classifieds 2	Version 2.0.4
Openclassifieds Open Classifieds 2	Version 2.0.5
Openclassifieds Open Classifieds 2	Version 2.0.6
Openclassifieds Open Classifieds 2	Version 2.0.7
Openclassifieds Open Classifieds 2	Version 2.0.8
Openclassifieds Open Classifieds 2	Version 2.0
Openclassifieds Open Classifieds 2	Version 2.1.1
Openclassifieds Open Classifieds 2	Version 2.1