NVD

Id
11148  
Name
CVE-2011-4809  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the HM Community (com_hmcommunity) component before 1.01 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) language[], (2) university[], (3) persent[], (4) company_name[], (5) designation[], (6) music[], (7) books[], (8) movies[], (9) games[], (10) syp[], (11) ft[], and (12) fa[] parameters in a save task for a profile to index.php. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-12-13  
Modified Date
2012-02-10  
Seq
2011-4809  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61809 11148 CVE-2011-4809 http://joomlaextensions.co.in/index.php?option=com_jeshop&view=category_detail&Itemid=118&id=38  View
61810 11148 CVE-2011-4809 18050  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33108 JVNDB-2011-003348 Joomla! 用 HM Community コンポーネントにおけるクロスサイトスクリプティングの脆弱性 Joomla! 用 HM Community (com_hmcommunity) コンポーネントには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-4809 52716 CVE-2011-4809 11148 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003348.html 2011-12-14 2011-12-16 View