NVD

Id
8454  
Name
CVE-2011-1524  
Description
Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the event log, a different vulnerability than CVE-2011-0545.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-03-28  
Modified Date
2013-02-06  
Seq
2011-1524  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48475 8454 CVE-2011-1524 8166  View
48476 8454 CVE-2011-1524 1025242  View
48477 8454 CVE-2011-1524 http://sotiriu.de/adv/NSOADV-2011-001.txt  View
48478 8454 CVE-2011-1524 17026  View
48479 8454 CVE-2011-1524 20110322 NSOADV-2011-001: Symantec LiveUpdate Administrator CSRF vulnerability  View
48480 8454 CVE-2011-1524 46856  View
48481 8454 CVE-2011-1524 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110321_00  View
48482 8454 CVE-2011-1524 ADV-2011-0727  View
48483 8454 CVE-2011-1524 symantec-lua-gui-csrf(66213)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34175 JVNDB-2011-004417 Symantec LUA の 管理ログイン GUI ページにおけるクロスサイトスクリプティングの脆弱性 Symantec LiveUpdate Administrator (LUA) の 管理ログイン GUI ページには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-1524 49431 CVE-2011-1524 8454 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004417.html 2011-03-21 2012-03-27 View