NVD

Id
11539  
Name
CVE-2011-5287  
Description
Multiple cross-site scripting (XSS) vulnerabilities in HESK before 2.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) hesk_settings[tmp_title] or (2) hesklang[ENCODING] parameter to inc/header.inc.php; the hesklang[attempt] parameter to (3) inc/assignment_search.inc.php, (4) inc/attachments.inc.php, (5) inc/common.inc.php, (6) inc/database.inc.php, (7) inc/prepare_ticket_search.inc.php, (8) inc/print_tickets.inc.php, (9) inc/show_admin_nav.inc.php, (10) inc/show_search_form.inc.php, or (11) inc/ticket_list.inc.php; or (12) the PATH_INFO to language/en/text.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2014-12-31  
Modified Date
2015-01-02  
Seq
2011-5287  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
63204 11539 CVE-2011-5287 https://www.htbridge.com/advisory/HTB23030  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35119 JVNDB-2011-005361 HESK におけるクロスサイトスクリプティングの脆弱性 HESK には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-5287 53194 CVE-2011-5287 11539 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005361.html 2011-07-03 2015-01-07 View