CVE

Id
49635  
CVE No.
CVE-2011-1723  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to projects/hg-helloworld/news/. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20110419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
538887 49635 CVE-2011-1723 BUGTRAQ:20110406 XSS Vulnerability in Redmine 1.0.1 to 1.1.1  View
538888 49635 CVE-2011-1723 URL:http://www.securityfocus.com/archive/1/archive/1/517355/100/0/threaded  View
538889 49635 CVE-2011-1723 MISC:http://www.mavitunasecurity.com/XSS-vulnerability-in-Redmine/  View
538890 49635 CVE-2011-1723 CONFIRM:http://www.redmine.org/news/53  View
538891 49635 CVE-2011-1723 BID:47193  View
538892 49635 CVE-2011-1723 URL:http://www.securityfocus.com/bid/47193  View
538893 49635 CVE-2011-1723 OSVDB:71564  View
538894 49635 CVE-2011-1723 URL:http://osvdb.org/71564  View
538895 49635 CVE-2011-1723 SECUNIA:43999  View
538896 49635 CVE-2011-1723 URL:http://secunia.com/advisories/43999  View
538897 49635 CVE-2011-1723 SREASON:8211  View
538898 49635 CVE-2011-1723 URL:http://securityreason.com/securityalert/8211  View
538899 49635 CVE-2011-1723 VUPEN:ADV-2011-0895  View
538900 49635 CVE-2011-1723 URL:http://www.vupen.com/english/advisories/2011/0895  View
538901 49635 CVE-2011-1723 XF:redmine-base-xss(66612)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34280 JVNDB-2011-004522 HP OpenView Storage Data Protector の OmniInet.exe におけるスタックベースのバッファオーバーフローの脆弱性 HP OpenView Storage Data Protector の Backup Client Service の OmniInet.exe には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2011-1728 49635 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004522.html  View