Lucene search
HistoryOct 25, 2012 - 5:55 p.m.
CVE-2011-5220
cve-2011-5220
cross-site scripting
xss
php-scms
security vulnerability
nvd
5.9 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
69.8%
Cross-site scripting (XSS) vulnerability in templates/default/Admin/Login.html in PHP-SCMS 1.6.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter to index.php.
Affected configurations
Node
cristopher_shiphp-scmsRange≤1.6.8
ORcristopher_shiphp-scmsMatch1.6.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| cristopher_shi:php-scms | cristopher shi php-scms | le | 1.6.8 |
| cristopher_shi:php-scms | cristopher shi php-scms | eq | 1.6.7 |
Related
cvelist
cvelist
CVE-2011-5220
2012-10-25 17:00:00
prion
prion
Cross site scripting
2012-10-25 17:55:00
nvd
nvd
CVE-2011-5220
2012-10-25 17:55:04
5.9 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
69.8%
Related for CVE-2011-5220