CVEvulnerability
CVE-2011-4918
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-08-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Elxis CMS 2009.2, 2009.3 and 2009.3 Aphrodite before revision 2684 allow remote attackers to inject arbitrary web script or HTML via the (1) task parameter to elxis/index.php, and (2) PATH_INFO to elxis/administrator/index.php.
Affected configurations
• elxis elxis cms 2009.2
• elxis elxis cms 2009.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://forum.elxis.org/index.php?PHPSESSID=v9i7kgmmb2554ldmlcmbj32ugjd0ngpc&topic=5144.msg43327#msg43327 Patch
- http://secunia.com/advisories/47073 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2011/12/31/2 www.openwall.com
- http://www.osvdb.org/77563 Exploit
- http://www.osvdb.org/77564 Exploit
- http://www.securityfocus.com/archive/1/520748/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/50910 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71648 exchange.xforce.ibmcloud.com
- http://forum.elxis.org/index.php?PHPSESSID=v9i7kgmmb2554ldmlcmbj32ugjd0ngpc&topic=5144.msg43327#msg43327 Patch
- http://secunia.com/advisories/47073 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2011/12/31/2 www.openwall.com
- http://www.osvdb.org/77563 Exploit
- http://www.osvdb.org/77564 Exploit
- http://www.securityfocus.com/archive/1/520748/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/50910 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71648 exchange.xforce.ibmcloud.com