NVD

Id
9500  
Name
CVE-2011-2771  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Mahara before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) URI attributes and (2) the External Feed component, as demonstrated by the guid element in an RSS feed.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-11-14  
Modified Date
2011-11-15  
Seq
2011-2771  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
54310 9500 CVE-2011-2771 http://security.debian.org/debian-security/pool/updates/main/m/mahara/mahara_1.2.6-2+squeeze3.debian.tar.gz  View
54311 9500 CVE-2011-2771 DSA-2334  View
54312 9500 CVE-2011-2771 https://bugs.launchpad.net/mahara/+bug/798136  View
54313 9500 CVE-2011-2771 https://launchpad.net/mahara/+milestone/1.4.1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32627 JVNDB-2011-002867 Mahara におけるクロスサイトスクリプティングの脆弱性 Mahara には、(1) URI 属性および (2) External Feed コンポーネントに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-2771 50678 CVE-2011-2771 9500 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002867.html 2011-11-03 2011-11-16 View