CVE

Id
52982  
CVE No.
CVE-2011-5070  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers to inject arbitrary web script or HTML via (1) the file name to incident_attachments.php; (2) unspecified vectors in link_add.php, possibly involving origref, linkref, linktype parameters, which are not properly handled in the clean_int function in lib/base.inc.php, or the redirect parameter, which is not properly handled in the html_redirect function in lib/html.inc.php; and (3) unspecified vectors in translate.php.  
Phase
Assigned (20120128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
561414 52982 CVE-2011-5070 CERT-VN:VU#576355  View
561415 52982 CVE-2011-5070 URL:http://www.kb.cert.org/vuls/id/576355  View
561416 52982 CVE-2011-5070 BID:50896  View
561417 52982 CVE-2011-5070 URL:http://www.securityfocus.com/bid/50896  View
561418 52982 CVE-2011-5070 OSVDB:77654  View
561419 52982 CVE-2011-5070 URL:http://www.osvdb.org/77654  View
561420 52982 CVE-2011-5070 OSVDB:77655  View
561421 52982 CVE-2011-5070 URL:http://www.osvdb.org/77655  View
561422 52982 CVE-2011-5070 OSVDB:77656  View
561423 52982 CVE-2011-5070 URL:http://www.osvdb.org/77656  View
561424 52982 CVE-2011-5070 SECUNIA:45437  View
561425 52982 CVE-2011-5070 URL:http://secunia.com/advisories/45437  View
561426 52982 CVE-2011-5070 XF:sit-multiple-xss(71652)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33418 JVNDB-2011-003658 Support Incident Tracker の translate.php における重要な情報を取得される脆弱性 Support Incident Tracker の translate.php には、重要な情報を取得される脆弱性が存在します。 CVE-2011-5075 52982 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003658.html  View