NVD

Id
10946  
Name
CVE-2011-4554  
Description
One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via (1) " (double quote) and newline characters in an org name or (2) " (double quote) characters in an e-mail address, related to a "2nd Order SMTP Injection" issue.  
Reject
 
CVSS Version
2  
CVSS Score
5.5  
Severity
Medium  
CVSS Base Score
5.5  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-12-06  
Modified Date
2011-12-08  
Seq
2011-4554  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61110 10946 CVE-2011-4554 http://dmcdonald.net/?page_id=43  View
61111 10946 CVE-2011-4554 [oneclickorgs-devspace] 20111117 Announce: One Click Orgs 1.2.3  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32964 JVNDB-2011-003204 One Click Orgs における巧妙に細工された SMTP トラフィックを誘発する脆弱性 One Click Orgs には、巧妙に細工された SMTP トラフィックを誘発する脆弱性が存在します。 CVE-2011-4554 52461 CVE-2011-4554 10946 5.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003204.html 2011-12-06 2011-12-12 View