NVD

Id
11511  
Name
CVE-2011-5255  
Description
Multiple cross-site scripting (XSS) vulnerabilities in admin/login in X3 CMS 0.4.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, (2) username, or (3) password parameter.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2013-01-31  
Modified Date
2013-01-31  
Seq
2011-5255  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
63107 11511 CVE-2011-5255 20120111 Multiple Cross-Site-Scripting vulnerabilities in x3cms  View
63108 11511 CVE-2011-5255 http://www.infoserve.de/system/files/advisories/INFOSERVE-ADV2011-04.txt  View
63109 11511 CVE-2011-5255 51346  View
63110 11511 CVE-2011-5255 http://www.x3cms.net/en/news/article/dae363948eb4b27f8b02a84ca054c3fc/release_0.4.3.1  View
63111 11511 CVE-2011-5255 http://x3cms.bzr.sourceforge.net/bzr/x3cms/revision/977  View
63112 11511 CVE-2011-5255 http://x3cms.bzr.sourceforge.net/bzr/x3cms/revision/984  View
63113 11511 CVE-2011-5255 x3cms-login-xss(72279)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34972 JVNDB-2011-005214 X3 CMS の admin/login におけるクロスサイトスクリプティングの脆弱性 X3 CMS の admin/login には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-5255 53162 CVE-2011-5255 11511 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005214.html 2011-11-21 2013-02-01 View