Lucene search
CVE-2011-5258
Multiple XSS vulnerabilities in OrangeHRM before 2.6.11.2 allow remote attackers to inject arbitrary web script or HTML
Show more
| Reporter | Title | Published | Views | Family All 3 |
|---|---|---|---|---|
 | CVE-2011-5258 | 12 Feb 201320:55 | – | nvd |
 | Cross site scripting | 12 Feb 201320:55 | – | prion |
 | CVE-2011-5258 | 12 Feb 201320:00 | – | cvelist |
Node
OROROROROROROROROROROROROR
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| uniqcode | query param | /index.php | Cross-site scripting (XSS) vulnerability allowing injection of arbitrary web script or HTML. | CWE-79 |
| isAdmin | query param | /index.php | Cross-site scripting (XSS) vulnerability allowing injection of arbitrary web script or HTML. | CWE-79 |
| PATH_INFO | path | /lib/controllers/centralcontroller.php | Cross-site scripting (XSS) vulnerability allowing injection of arbitrary web script or HTML. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo12 Feb 2013 20:55Current
5.9Medium risk
Vulners AI Score5.9
CVSS24.3
EPSS0.01093