Lucene search

[email protected]NVD:CVE-2011-1682

HistoryApr 13, 2011 - 2:55 p.m.

CVE-2011-1682

2011-04-1314:55:01

CWE-352

[email protected]

web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.1%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create a list or (2) insert cross-site scripting (XSS) sequences. NOTE: this issue exists because of an incomplete fix for CVE-2011-0748. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD

Node

tincanphplistRange≤2.10.13

tincanphplistMatch1.0

tincanphplistMatch1.0.1

tincanphplistMatch1.1.2b

tincanphplistMatch1.1.3b

tincanphplistMatch1.1.4b

tincanphplistMatch1.1.5

tincanphplistMatch1.1.5b

tincanphplistMatch1.1.6

tincanphplistMatch1.1.7

tincanphplistMatch1.3.5

tincanphplistMatch1.3.7

tincanphplistMatch1.4.1

tincanphplistMatch1.5.0

tincanphplistMatch1.5.1

tincanphplistMatch1.6.0

tincanphplistMatch1.6.1

tincanphplistMatch1.6.3

tincanphplistMatch1.6.4

tincanphplistMatch1.7.0

tincanphplistMatch1.7.1

tincanphplistMatch1.8.0

tincanphplistMatch1.9.0

tincanphplistMatch1.9.1

tincanphplistMatch1.9.2

tincanphplistMatch1.9.3

tincanphplistMatch2.1.0

tincanphplistMatch2.1.1

tincanphplistMatch2.1.3

tincanphplistMatch2.1.4

tincanphplistMatch2.2.0

tincanphplistMatch2.2.1

tincanphplistMatch2.3.0

tincanphplistMatch2.3.1

tincanphplistMatch2.3.2

tincanphplistMatch2.3.3

tincanphplistMatch2.3.4

tincanphplistMatch2.4.0

tincanphplistMatch2.4.7

tincanphplistMatch2.5.0

tincanphplistMatch2.5.1

tincanphplistMatch2.5.2

tincanphplistMatch2.5.3

tincanphplistMatch2.5.4

tincanphplistMatch2.5.5

tincanphplistMatch2.5.6

tincanphplistMatch2.5.7

tincanphplistMatch2.5.8

tincanphplistMatch2.6

tincanphplistMatch2.6.0

tincanphplistMatch2.6.1

tincanphplistMatch2.6.2

tincanphplistMatch2.6.3

tincanphplistMatch2.6.4

tincanphplistMatch2.6.5

tincanphplistMatch2.7.1

tincanphplistMatch2.7.2

tincanphplistMatch2.8.2

tincanphplistMatch2.8.7

tincanphplistMatch2.8.12

tincanphplistMatch2.9.3

tincanphplistMatch2.9.4

tincanphplistMatch2.9.5

tincanphplistMatch2.10.1

tincanphplistMatch2.10.2

tincanphplistMatch2.10.3

tincanphplistMatch2.10.4

tincanphplistMatch2.10.5

tincanphplistMatch2.10.6

tincanphplistMatch2.10.7

tincanphplistMatch2.10.8

tincanphplistMatch2.10.9

tincanphplistMatch2.10.10

tincanphplistMatch2.10.11

tincanphplistMatch2.10.12

References

secunia.com/advisories/44041

exchange.xforce.ibmcloud.com/vulnerabilities/66666

exchange.xforce.ibmcloud.com/vulnerabilities/66816

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.1%

JSON

Related for NVD:CVE-2011-1682

cvelist2 prion2 cve2 nvd1 securityvulns1