NVD

Id
11522  
Name
CVE-2011-5267  
Description
Multiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as used in WikiWig 5.01 and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) to_p_dict or (2) to_r_list parameter. NOTE: this issue might be related to the htmlarea plugin and CVE-2013-5670.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2013-11-05  
Modified Date
2013-11-07  
Seq
2011-5267  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
63149 11522 CVE-2011-5267 http://www.autosectools.com/Advisories/WikiWig.5.01_Persistent-Reflected.Cross-site.Scripting_139.html  View
63150 11522 CVE-2011-5267 16988  View
63151 11522 CVE-2011-5267 [oss-security] 20130901 CVE request: serendipity before 1.7.3 XSS  View
63152 11522 CVE-2011-5267 [oss-security] 20130901 Re: CVE request: serendipity before 1.7.3 XSS  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35006 JVNDB-2011-005248 WikiWig などの製品で使用される Xinha の SpellChecker モジュールにおけるクロスサイトスクリプティングの脆弱性 WikiWig およびその他の製品で使用される Xinha の SpellChecker モジュールの spell-check-savedicts.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-5267 53174 CVE-2011-5267 11522 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005248.html 2011-03-11 2013-11-07 View