CVE-2011-5285

2015-01-0102:00:00

mitre

www.cve.org

bugfree 2.1.3

cross-site scripting

remote attackers

injection

html

adminprojectlist.php

admingrouplist.php

adminuserloglist.php

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

50.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in BugFree 2.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the ActionType parameter to Bug.php, the ReportMode parameter to (2) Report.php or (3) ReportLeft.php, or the PATH_INFO to (4) AdminProjectList.php, (5) AdminGroupList.php, or (6) AdminUserLogList.php.

References

www.htbridge.com/advisory/HTB23048