NVD

Id
11330  
Name
CVE-2011-5070  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers to inject arbitrary web script or HTML via (1) the file name to incident_attachments.php; (2) unspecified vectors in link_add.php, possibly involving origref, linkref, linktype parameters, which are not properly handled in the clean_int function in lib/base.inc.php, or the redirect parameter, which is not properly handled in the html_redirect function in lib/html.inc.php; and (3) unspecified vectors in translate.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2012-01-28  
Modified Date
2012-01-30  
Seq
2011-5070  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62615 11330 CVE-2011-5070 VU#576355  View
62616 11330 CVE-2011-5070 50896  View
62617 11330 CVE-2011-5070 sit-multiple-xss(71652)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25546 JVNDB-2012-001253 Support Incident Tracker におけるクロスサイトスクリプティングの脆弱性 Support Incident Tracker には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-5070 52977 CVE-2011-5070 11330 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001253.html 2012-01-29 2012-02-01 View
33269 JVNDB-2011-003509 Support Incident Tracker に複数の脆弱性 Support Incident Tracker (SiT!) には、複数の脆弱性が存在します。 CVE-2011-5070 52977 CVE-2011-5070 11330 N/A http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003509.html 2011-12-05 2011-12-27 View