NVD

Id
10532  
Name
CVE-2011-3978  
Description
Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow remote authenticated users to inject arbitrary web script or HTML via the (1) commentemail, (2) commentmessage, or (3) commentname parameter in a sendcomment action for the news page.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-10-04  
Modified Date
2012-02-13  
Seq
2011-3978  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
59699 10532 CVE-2011-3978 8407  View
59700 10532 CVE-2011-3978 http://www.lightneasy.org/punbb/viewtopic.php?id=1464  View
59701 10532 CVE-2011-3978 http://www.rul3z.de/advisories/SSCHADV2011-013.txt  View
59702 10532 CVE-2011-3978 20110908 Multiple XSS vulnerabilities in LightNEasy 3.2.4  View
59703 10532 CVE-2011-3978 lightneasy-lightneasy-multiple-xss(69737)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32096 JVNDB-2011-002336 LightNEasy の LightNEasy.php におけるクロスサイトスクリプティングの脆弱性 LightNEasy の LightNEasy.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-3978 51885 CVE-2011-3978 10532 3.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002336.html 2011-10-04 2011-10-11 View