NVD

Id
10951  
Name
CVE-2011-4562  
Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) view/admin/log_item.php and (2) view/admin/log_item_details.php in the Redirection plugin 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header in a request to a post that does not exist.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-11-28  
Modified Date
2011-11-29  
Seq
2011-4562  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61125 10951 CVE-2011-4562 http://dotxed.net/2011/websicherheit/lazy-xss-wenn-statistiken-und-loggs-zur-gefahr-werden.html  View
61126 10951 CVE-2011-4562 http://packetstormsecurity.org/files/view/105573/wpredirection229-xss.txt  View
61127 10951 CVE-2011-4562 http://plugins.trac.wordpress.org/changeset?reponame=&new=447262%40redirection&old=421721%40redirection  View
61128 10951 CVE-2011-4562 http://wordpress.org/extend/plugins/redirection/changelog/  View
61129 10951 CVE-2011-4562 49985  View
61130 10951 CVE-2011-4562 wpredirection-referer-header-xss(70373)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32867 JVNDB-2011-003107 WordPress 用 Redirection プラグインにおけるクロスサイトスクリプティングの脆弱性 WordPress 用 Redirection プラグイン内にある (1) view/admin/log_item.php、および (2) view/admin/log_item_details.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-4562 52469 CVE-2011-4562 10951 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003107.html 2011-11-28 2011-11-30 View