CVE-2011-1134

Опубликовано: 05 нояб. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager.

Ссылки

https://blog.s9y.org/archives/224-Important-Security-Update-Serendipity-1.5.5-released.html
Release Notes
Vendor Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611661
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-1134
Third Party Advisory
https://www.openwall.com/lists/oss-security/2011/03/02/5
Mailing List
Third Party Advisory
https://blog.s9y.org/archives/224-Important-Security-Update-Serendipity-1.5.5-released.html
Release Notes
Vendor Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611661
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-1134
Third Party Advisory
https://www.openwall.com/lists/oss-security/2011/03/02/5
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:s9y:serendipity:*:*:*:*:*:*:*:*

Версия до 1.5.5 (исключая)

EPSS

Процентиль: 89%

0.05004

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-434

Связанные уязвимости

CVE-2011-1134

CVSS3: 9.8

ubuntu

около 6 лет назад

Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager.

CVE-2011-1134

CVSS3: 9.8

debian

около 6 лет назад

Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity pa ...

GHSA-6c3f-x526-64jj

github

больше 3 лет назад

Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager.

EPSS

Процентиль: 89%

0.05004

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-434