NVD

Id
10025  
Name
CVE-2011-3371  
Description
Multiple cross-site scripting (XSS) vulnerabilities in include/functions.php in PunBB before 1.3.6 allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) form_sent, (3) csrf_token, (4) req_confirm, or (5) delete parameter to delete.php, the (6) id, (7) form_sent, (8) csrf_token, (9) req_message, or (10) submit parameter to edit.php, the (11) action, (12) form_sent, (13) csrf_token, (14) req_email, or (15) request_pass parameter to login.php, the (16) email, (17) form_sent, (18) redirect_url, (19) csrf_token, (20) req_subject, (21) req_message, or (22) submit parameter to misc.php, the (23) action, (24) id, (25) form_sent, (26) csrf_token, (27) req_old_password, (28) req_new_password1, (29) req_new_password2, or (30) update parameter to profile.php, or the (31) action, (32) form_sent, (33) csrf_token, (34) req_username, (35) req_password1, (36) req_password2, (37) req_email1, (38) timezone, or (39) register parameter to register.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-10-02  
Modified Date
2012-05-18  
Seq
2011-3371  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57495 10025 CVE-2011-3371 20110916 PunBB PHP Forum - Multiple XSS  View
57496 10025 CVE-2011-3371 20110918 Re: PunBB PHP Forum - Multiple XSS  View
57497 10025 CVE-2011-3371 20110922 Re: PunBB PHP Forum - Multiple XSS  View
57498 10025 CVE-2011-3371 http://punbb.informer.com/forums/topic/24427/multiple-xss-vulnerabilities/  View
57499 10025 CVE-2011-3371 http://punbb.informer.com/forums/topic/24430/punbb-136/  View
57500 10025 CVE-2011-3371 1026073  View
57501 10025 CVE-2011-3371 [oss-security] 20110918 CVE request: PunBB multiple XSS issues  View
57502 10025 CVE-2011-3371 [oss-security] 20110922 Re: CVE request: PunBB multiple XSS issues  View
57503 10025 CVE-2011-3371 https://github.com/downloads/punbb/punbb/punbb-1.3.6.zip  View
57504 10025 CVE-2011-3371 https://github.com/punbb/punbb/commit/dd50a50a2760f10bd2d09814e30af4b36052ca6d  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32087 JVNDB-2011-002327 PunBB の include/functions.php におけるクロスサイトスクリプティングの脆弱性 PunBB の include/functions.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-3371 51278 CVE-2011-3371 10025 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002327.html 2011-10-02 2011-10-07 View