CVE

Id
48652  
CVE No.
CVE-2011-0740  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in RSS Feed Reader 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the rss_url parameter.  
Phase
Assigned (20110201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
529003 48652 CVE-2011-0740 MISC:http://www.autosectools.com/Advisories/WordPress.RSS.Feed.Reader.for.WordPress.0.1_Reflected.Cross-site.Scripting_82.html  View
529004 48652 CVE-2011-0740 BID:45997  View
529005 48652 CVE-2011-0740 URL:http://www.securityfocus.com/bid/45997  View
529006 48652 CVE-2011-0740 OSVDB:70644  View
529007 48652 CVE-2011-0740 URL:http://osvdb.org/70644  View
529008 48652 CVE-2011-0740 SECUNIA:43071  View
529009 48652 CVE-2011-0740 URL:http://secunia.com/advisories/43071  View
529010 48652 CVE-2011-0740 XF:rssfeedreader-slashbox-xss(64949)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33993 JVNDB-2011-004235 SugarCRM における顧客名などを発見される脆弱性 SugarCRM は、特定の重複チェックにより表示される警告ページのリロードおよび直接リクエストを適切に処理しないため、顧客名または担当者名を発見される脆弱性が存在します。 CVE-2011-0745 48652 4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004235.html  View