CVE-2011-1135

Опубликовано: 05 нояб. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php.

Ссылки

https://blog.s9y.org/archives/224-Important-Security-Update-Serendipity-1.5.5-released.html
Release Notes
Third Party Advisory
Vendor Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611661
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-1135
Third Party Advisory
https://www.openwall.com/lists/oss-security/2011/03/02/5
Mailing List
Third Party Advisory
https://blog.s9y.org/archives/224-Important-Security-Update-Serendipity-1.5.5-released.html
Release Notes
Third Party Advisory
Vendor Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611661
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-1135
Third Party Advisory
https://www.openwall.com/lists/oss-security/2011/03/02/5
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:s9y:serendipity:*:*:*:*:*:*:*:*

Версия до 1.5.5 (исключая)

EPSS

Процентиль: 75%

0.00863

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2011-1135

CVSS3: 6.1

ubuntu

около 6 лет назад

CVE-2011-1135

CVSS3: 6.1

debian

около 6 лет назад

Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity pa ...

GHSA-qp3g-fwv9-c8fv

github

больше 3 лет назад

EPSS

Процентиль: 75%

0.00863

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79