NVD

Id
7515  
Name
CVE-2011-0451  
Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/cart_tag.tpl in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-02-03  
Modified Date
2011-02-17  
Seq
2011-0451  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
42397 7515 CVE-2011-0451 JVN#84393059  View
42398 7515 CVE-2011-0451 JVNDB-2011-000011  View
42399 7515 CVE-2011-0451 http://svn.ec-cube.net/open_trac/changeset/18742  View
42400 7515 CVE-2011-0451 http://www.ec-cube.net/info/weakness/weakness.php?id=36  View
42401 7515 CVE-2011-0451 46100  View
42402 7515 CVE-2011-0451 ec-cube-list-xss(65079)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30663 JVNDB-2011-000011 EC-CUBE におけるクロスサイトスクリプティングの脆弱性 株式会社ロックオンが提供する EC-CUBE には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-0451 48358 CVE-2011-0451 7515 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000011.html 2011-02-02 2011-02-02 View