CVE-2013-7188
Estado: ModificadaMedia (4.3)—
Cross-site scripting (XSS) vulnerability in KBKP Software HostBill before 2013-12-14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
- Puntuación base: 4.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.28%
- Percentil entre todas las CVEs puntuadas: 69
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-79
Referencias
- http://extras.hostbillapp.com/security-advisory-hostbill-version-2013-12-14/
- http://hostbillapp.com/changelog
- http://osvdb.org/101030
- http://secunia.com/advisories/56124
- https://blog.rack911.com/security-advisories/hostbill-xss-admin-hijack-security-vulnerability-r911-0099
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89750
- http://extras.hostbillapp.com/security-advisory-hostbill-version-2013-12-14/
- http://hostbillapp.com/changelog
- http://osvdb.org/101030
- http://secunia.com/advisories/56124
- https://blog.rack911.com/security-advisories/hostbill-xss-admin-hijack-security-vulnerability-r911-0099
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89750
JSON original (NVD)
Mostrar
{
"id": "CVE-2013-7188",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2013-12-20T23:55:18.963",
"references": [
{
"url": "http://extras.hostbillapp.com/security-advisory-hostbill-version-2013-12-14/",
"source": "cve@mitre.org"
},
{
"url": "http://hostbillapp.com/changelog",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/101030",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/56124",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://blog.rack911.com/security-advisories/hostbill-xss-admin-hijack-security-vulnerability-r911-0099",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89750",
"source": "cve@mitre.org"
},
{
"url": "http://extras.hostbillapp.com/security-advisory-hostbill-version-2013-12-14/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://hostbillapp.com/changelog",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/101030",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/56124",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://blog.rack911.com/security-advisories/hostbill-xss-admin-hijack-security-vulnerability-r911-0099",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89750",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in KBKP Software HostBill before 2013-12-14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
},
{
"lang": "es",
"value": "Vulnerabilidad corss-site scripting (XSS) en KBKP Software Hostbill anteriores a 2013-12-14 permite a atacantes remotos inyectar script web o HTML de forma arbitraria a través de vectores no especificados."
}
],
"lastModified": "2026-06-17T00:01:30.590",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A103A21-A1BC-4576-AED4-6C5AF3A16908",
"versionEndIncluding": "13-12-2013"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:02-08-2013:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8D36534-5D58-428F-84DF-F6D04FACC466"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:04-11-2013:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8523E3D4-AEA8-48B1-A803-BFA4E8521661"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8726F2AB-A981-45F5-8652-9DE160D6D287"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A5404D8-E2C1-4CB8-B0E5-0378E181C55F"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F877F8B-089D-44C2-AA33-FE1C262BE829"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.7.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D327A52-1B81-4B84-8426-24DFC6565A62"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.7.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "358095FE-D258-44AF-97DF-B5DF0DC3FD65"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A62EB14-66E7-4E57-A7DB-08E6D20AA5E7"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9299A3FE-1863-4901-9C66-4E55AC41AD55"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4DBD775-3246-40F3-A2E5-8B80260FB787"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.8.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9CDE2CED-9926-4223-B511-FFDAA11F1F4E"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.8.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B20CFD6D-E432-4830-8E0D-E52E1DCCF5BC"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9AE0464E-A952-4007-BAB9-28512D300C74"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.9.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8A53DD5-63C4-4383-ACFB-1FD18FC64620"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.9.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6082732B-E017-45F6-8B39-CED62D5C6156"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:06-11-2013:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88A79F09-A5F2-4F02-8495-EFB6A6DEC6F4"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:06-12-2013:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17698694-D32F-4C2C-A075-1756867383F1"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:08-11-2013:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5AF3BBC-DB0C-430B-9280-2EA6980B5D16"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:15-11-2013:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE0F11A7-63B8-456F-822A-7B29F40D096C"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:18-10-2013:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB7FD83B-860F-4A35-B2D4-F8863A799F8C"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:19-11-2013:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D98B74C-BA50-41DF-A04A-888F1A090AAA"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:22-11-2013:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21AA115C-90DC-4B3A-84B5-ADD8C37CC4F9"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:25-10-2013:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1296BCE4-D0D6-4C33-B4DA-C19E9F3160B1"
},
{
"criteria": "cpe:2.3:a:hostbillapp:hostbill:29-11-2013:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E2E4B57-F379-408A-89BB-9D01623D28C5"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}