Lucene search

[email protected]NVD:CVE-2011-4547

HistoryNov 29, 2011 - 12:55 a.m.

CVE-2011-4547

2011-11-2900:55:01

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

65.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in includes/templates/template_default/common/tpl_header_test_info.php in Zen Cart 1.3.9h, when debugging is enabled, might allow remote attackers to inject arbitrary web script or HTML via the (1) main_page parameter or (2) PATH_INFO, a different vulnerability than CVE-2011-4567.

Affected configurations

Nvd

Node

zen-cartzen_cartMatch1.3.9h

VendorProductVersionCPE
zen-cartzen_cart1.3.9hcpe:2.3:a:zen-cart:zen_cart:1.3.9h:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
zen-cart	zen_cart	1.3.9h	cpe:2.3:a:zen-cart:zen_cart:1.3.9h:::::::*

References

www.securityfocus.com/bid/50787

exchange.xforce.ibmcloud.com/vulnerabilities/71519

www.dognaedis.com/vulns/DGS-SEC-9.html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

65.9%

JSON

Related for NVD:CVE-2011-4547

cvelist2 cve2 nvd1 prion2 exploitdb1