CVE

Id
48363  
CVE No.
CVE-2011-0451  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/cart_tag.tpl in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  
Phase
Assigned (20110114)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
525208 48363 CVE-2011-0451 CONFIRM:http://svn.ec-cube.net/open_trac/changeset/18742  View
525209 48363 CVE-2011-0451 CONFIRM:http://www.ec-cube.net/info/weakness/weakness.php?id=36  View
525210 48363 CVE-2011-0451 JVN:JVN#84393059  View
525211 48363 CVE-2011-0451 URL:http://jvn.jp/en/jp/JVN84393059/index.html  View
525212 48363 CVE-2011-0451 JVNDB:JVNDB-2011-000011  View
525213 48363 CVE-2011-0451 URL:http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000011.html  View
525214 48363 CVE-2011-0451 BID:46100  View
525215 48363 CVE-2011-0451 URL:http://www.securityfocus.com/bid/46100  View
525216 48363 CVE-2011-0451 SECUNIA:43153  View
525217 48363 CVE-2011-0451 URL:http://secunia.com/advisories/43153  View
525218 48363 CVE-2011-0451 XF:ec-cube-list-xss(65079)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30671 JVNDB-2011-000019 OTRS における OS コマンドインジェクションの脆弱性 OTRS には、OS コマンドインジェクションの脆弱性が存在します。 CVE-2011-0456 48363 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000019.html  View