NVD

Id
10939  
Name
CVE-2011-4544  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Prestashop before 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) address or (2) relativ_base_dir parameter to modules/mondialrelay/googlemap.php; the (3) relativ_base_dir, (4) Pays, (5) Ville, (6) CP, (7) Poids, (8) Action, or (9) num parameter to prestashop/modules/mondialrelay/googlemap.php; (10) the num_mode parameter to modules/mondialrelay/kit_mondialrelay/RechercheDetailPointRelais_ajax.php; (11) the Expedition parameter to modules/mondialrelay/kit_mondialrelay/SuiviExpedition_ajax.php; or the (12) folder or (13) name parameter to admin/ajaxfilemanager/ajax_save_text.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-12-01  
Modified Date
2011-12-12  
Seq
2011-4544  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61093 10939 CVE-2011-4544 50784  View
61094 10939 CVE-2011-4544 https://www.dognaedis.com/vulns/DGS-SEC-5.html  View
61095 10939 CVE-2011-4544 https://www.dognaedis.com/vulns/DGS-SEC-6.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32940 JVNDB-2011-003180 Prestashop におけるクロスサイトスクリプティングの脆弱性 Prestashop には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-4544 52451 CVE-2011-4544 10939 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003180.html 2011-12-01 2011-12-05 View