CVE-2011-4335

Multiple cross-site scripting (XSS) vulnerabilities in Contao before 2.10.2 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php in a (1) teachers.html or (2) teachers/ action.

• contao contao cms (<= 2.10.1) • contao contao cms 2.0 • contao contao cms 2.1.0 • contao contao cms 2.1.1 • contao contao cms 2.1.2 • contao contao cms 2.1.3 • contao contao cms 2.1.4 • contao contao cms 2.1.5 • contao contao cms 2.1.6 • contao contao cms 2.1.7 • contao contao cms 2.1.8 • contao contao cms 2.1.9 • contao contao cms 2.1.10 • contao contao cms 2.1.11 • contao contao cms 2.1.12 • contao contao cms 2.1.13 • contao contao cms 2.1.14 • contao contao cms 2.1.15 • contao contao cms 2.1.16 • contao contao cms 2.1.17 • contao contao cms 2.1.18 • contao contao cms 2.1.19 • contao contao cms 2.1.20 • contao contao cms 2.1.21 • contao contao cms 2.1.22 • contao contao cms 2.2.0 • contao contao cms 2.2.1 • contao contao cms 2.2.2 • contao contao cms 2.2.3 • contao contao cms 2.2.4 • contao contao cms 2.2.5 • contao contao cms 2.2.6 • contao contao cms 2.2.7 • contao contao cms 2.2.8 • contao contao cms 2.2.9 • contao contao cms 2.2.10 • contao contao cms 2.2.11 • contao contao cms 2.2.12 • contao contao cms 2.3.0 • contao contao cms 2.3.1 • contao contao cms 2.3.2 • contao contao cms 2.3.3 • contao contao cms 2.3.4 • contao contao cms 2.4.0 • contao contao cms 2.4.1 • contao contao cms 2.4.2 • contao contao cms 2.4.3 • contao contao cms 2.4.4 • contao contao cms 2.4.5 • contao contao cms 2.4.6 • contao contao cms 2.4.7 • contao contao cms 2.5.0 • contao contao cms 2.5.1 • contao contao cms 2.5.2 • contao contao cms 2.5.3 • contao contao cms 2.5.4 • contao contao cms 2.5.5 • contao contao cms 2.5.6 • contao contao cms 2.5.7 • contao contao cms 2.5.8 … and 30 more