CVE-2014-125078

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability was found in yanheven console and classified as problematic. Affected by this issue is some unknown functionality of the file horizon/static/horizon/js/horizon.instances.js. The manipulation leads to cross site scripting. The attack may be launched remotely. The patch is identified as 32a7b713468161282f2ea01d5e2faff980d924cd. It is recommended to apply a patch to fix this issue. VDB-218354 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
yanheven	console	n/a

References

https://github.com/yanheven/console/commit/32a7b713468161282f2ea01d5e2faff980d924cdPatch
https://vuldb.com/?ctiid.218354Permissions Required, Third Party Advisory
https://vuldb.com/?id.218354Third Party Advisory
https://github.com/yanheven/console/commit/32a7b713468161282f2ea01d5e2faff980d924cdPatch
https://vuldb.com/?ctiid.218354Permissions Required, Third Party Advisory
https://vuldb.com/?id.218354Third Party Advisory

Timeline

Published: Jan 15, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-1250799.8A vulnerability was found in agy pontifex.http. It has been declared as critical. This vulnerability affects unknown code of the file lib/Ht CVE-2014-1250809.8A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknown code. The manipula CVE-2014-1250819.8A vulnerability, which was classified as critical, has been found in risheesh debutsav. This issue affects some unknown processing. The mani CVE-2014-1250829.8A vulnerability was found in nivit redports. It has been declared as critical. This vulnerability affects unknown code of the file redports-CVE-2014-1250839.8A vulnerability has been found in Anant Labs google-enterprise-connector-dctm up to 3.2.3 and classified as critical. Affected by this vulne CVE-2014-1250849.8A vulnerability, which was classified as critical, has been found in Gimmie Plugin 1.2.2 on vBulletin. This issue affects some unknown proce CVE-2014-1250859.8A vulnerability, which was classified as critical, was found in Gimmie Plugin 1.2.2 on vBulletin. Affected is an unknown function of the fil CVE-2014-1250869.8A vulnerability has been found in Gimmie Plugin 1.2.2 on vBulletin and classified as critical. Affected by this vulnerability is an unknown CVE-2014-1250879.8A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionali CVE-2014-1250886.1A vulnerability was found in qt-users-jp silk 0.0.1. It has been declared as problematic. This vulnerability affects unknown code of the fil CVE-2014-1250896.1A vulnerability was found in cention-chatserver 3.8.0-rc1. It has been declared as problematic. Affected by this vulnerability is the functi CVE-2014-1250906.1A vulnerability was found in Media Downloader Plugin 0.1.992 on WordPress. It has been declared as problematic. This vulnerability affects t