CVE

Id
50922  
CVE No.
CVE-2011-3010  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the newtopic parameter in a WebCreateNewTopic action, related to the TWiki.WebCreateNewTopicTemplate topic; or (2) the query string to SlideShow.pm in the SlideShowPlugin.  
Phase
Assigned (20110809)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
549480 50922 CVE-2011-3010 BUGTRAQ:20110922 XSS Vulnerabilities in TWiki < 5.1.0  View
549481 50922 CVE-2011-3010 URL:http://archives.neohapsis.com/archives/bugtraq/2011-09/0142.html  View
549482 50922 CVE-2011-3010 MISC:http://www.mavitunasecurity.com/xss-vulnerability-in-twiki5  View
549483 50922 CVE-2011-3010 CONFIRM:http://develop.twiki.org/trac/changeset/21920  View
549484 50922 CVE-2011-3010 CONFIRM:http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2011-3010  View
549485 50922 CVE-2011-3010 BID:49746  View
549486 50922 CVE-2011-3010 URL:http://www.securityfocus.com/bid/49746  View
549487 50922 CVE-2011-3010 OSVDB:75673  View
549488 50922 CVE-2011-3010 URL:http://www.osvdb.org/75673  View
549489 50922 CVE-2011-3010 OSVDB:75674  View
549490 50922 CVE-2011-3010 URL:http://www.osvdb.org/75674  View
549491 50922 CVE-2011-3010 SECTRACK:1026091  View
549492 50922 CVE-2011-3010 URL:http://securitytracker.com/id?1026091  View
549493 50922 CVE-2011-3010 SECUNIA:46123  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25778 JVNDB-2012-001485 Google Chrome の PDF コーデックにおける整数オーバーフローの脆弱性 Google Chrome の PDF コーデックには、整数オーバーフローの脆弱性が存在します。 CVE-2011-3015 50922 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001485.html  View