CVEvulnerability
CVE-2011-5205
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-10-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in audl.php in Rapidleech 2.3 rev42 SVN r358, rev43 SVN r397, and earlier allows remote attackers to inject arbitrary web script or HTML via the links parameter.
Affected configurations
• rapidleech rapidleech (<= 2.3)
• rapidleech rapidleech 2.3
• rapidleech rapidleech rev36
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.org/files/108239/rapidleech-xss.txt Exploit
- http://secunia.com/advisories/47434 Vendor Advisory
- http://www.securityfocus.com/bid/51215 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72071 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.org/files/108239/rapidleech-xss.txt Exploit
- http://secunia.com/advisories/47434 Vendor Advisory
- http://www.securityfocus.com/bid/51215 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72071 exchange.xforce.ibmcloud.com