CVE

Id
52477  
CVE No.
CVE-2011-4565  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.5.1.a, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to include/formdhtmltextarea_preview.php or (2) img BBCODE tag within the message parameter to pmlite.php (aka Private Message). NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20111128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
558910 52477 CVE-2011-4565 MISC:https://www.htbridge.ch/advisory/multiple_xss_in_xoops_web_application_platform.html  View
558911 52477 CVE-2011-4565 CONFIRM:http://xoops.org/modules/news/article.php?storyid=6094  View
558912 52477 CVE-2011-4565 BID:49995  View
558913 52477 CVE-2011-4565 URL:http://www.securityfocus.com/bid/49995  View
558914 52477 CVE-2011-4565 SECUNIA:46238  View
558915 52477 CVE-2011-4565 URL:http://secunia.com/advisories/46238  View
558916 52477 CVE-2011-4565 XF:xoops-formdhtmltextareapreview-xss(70378)  View
558917 52477 CVE-2011-4565 URL:http://xforce.iss.net/xforce/xfdb/70378  View
558918 52477 CVE-2011-4565 XF:xoops-pmlite-xss(70377)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32877 JVNDB-2011-003117 Time Returns コンポーネントにおける SQL インジェクションの脆弱性 Time Returns (com_timereturns) コンポーネントには、SQL インジェクションの脆弱性が存在します。 CVE-2011-4570 52477 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003117.html  View