Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4203 State: PUBLISHED Published: 2011-12-22T15:00:00Z Last Updated: 2024-09-17T02:15:46.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable. Additional Analyst Notes: - CVE Program Container: References: - http://tracker.moodle.org/browse/MDL-24808 - http://penturalabs.wordpress.com/2011/12/13/advisory-crlf-injection-vulnerability-in-moodle/
CVE ID: CVE-2011-4211 State: PUBLISHED Published: 2011-10-30T19:00:00 Last Updated: 2024-08-07T00:01:50.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FakeFile implementation in the sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly control the opening of files, which allows local users to bypass intended access restrictions and create arbitrary files via ALLOWED_MODES and ALLOWED_DIRS changes within the code parameter to _ah/admin/interactive/execute, a different vulnerability than CVE-2011-1364. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/googleappengine/wiki/SdkReleaseNotes - https://exc
otes: - CVE Program Container: References: - http://code.google.com/p/googleappengine/wiki/SdkReleaseNotes - https://exchange.xforce.ibmcloud.com/vulnerabilities/71064 - http://blog.watchfire.com/files/googleappenginesdk.pdf - http://www.securityfocus.com/bid/50464
CVE ID: CVE-2011-4212 State: PUBLISHED Published: 2011-10-30T19:00:00 Last Updated: 2024-08-07T00:01:51.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent os.popen calls, which allows local users to bypass intended access restrictions and execute arbitrary commands via a dev_appserver.RestrictedPathFunction._original_os reference within the code parameter to _ah/admin/interactive/execute, a different vulnerability than CVE-2011-1364. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/googleappengine/wiki/SdkReleaseNotes - http://blog.watchfire
E Program Container: References: - http://code.google.com/p/googleappengine/wiki/SdkReleaseNotes - http://blog.watchfire.com/files/googleappenginesdk.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/71063
CVE ID: CVE-2011-4213 State: PUBLISHED Published: 2011-10-30T19:00:00 Last Updated: 2024-08-07T00:01:51.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent use of the os module, which allows local users to bypass intended access restrictions and execute arbitrary commands via a file_blob_storage.os reference within the code parameter to _ah/admin/interactive/execute, a different vulnerability than CVE-2011-1364. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/googleappengine/wiki/SdkReleaseNotes - http://blog.watchfire.com/files/googleappeng
ferences: - http://code.google.com/p/googleappengine/wiki/SdkReleaseNotes - http://blog.watchfire.com/files/googleappenginesdk.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/71062
CVE ID: CVE-2011-4214 State: PUBLISHED Published: 2011-11-01T19:00:00 Last Updated: 2024-08-07T00:01:51.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to bypass authentication and obtain administrator privileges via a crafted oozimsrememberme cookie. Additional Analyst Notes: - CVE Program Container: References: - http://en.securitylab.ru/lab/PT-2011-20 - http://www.kb.cert.org/vuls/id/800227 - http://www.securityfocus.com/bid/50107
CVE ID: CVE-2011-4215 State: PUBLISHED Published: 2011-11-01T19:00:00 Last Updated: 2024-08-07T00:01:51.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lib/ooz_access.php in OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to execute arbitrary SQL commands via the cookieName variable. Additional Analyst Notes: - CVE Program Container: References: - http://en.securitylab.ru/lab/PT-2011-21 - http://www.kb.cert.org/vuls/id/800227 - http://www.securityfocus.com/bid/50107
CVE ID: CVE-2011-4216 State: PUBLISHED Published: 2011-11-01T19:00:00 Last Updated: 2024-08-07T00:01:51.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Investintech.com SlimPDF Reader does not properly restrict write operations, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71100 - http://www.kb.cert.org/vuls/id/275036
CVE ID: CVE-2011-4217 State: PUBLISHED Published: 2011-11-01T19:00:00Z Last Updated: 2024-09-16T20:16:39.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Investintech.com SlimPDF Reader does not properly restrict read operations during block data moves, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/275036
CVE ID: CVE-2011-4218 State: PUBLISHED Published: 2011-11-01T19:00:00 Last Updated: 2024-08-07T00:01:51.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Investintech.com SlimPDF Reader does not prevent faulting-instruction data from affecting write operations, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71098 - http://www.kb.cert.org/vuls/id/275036
CVE ID: CVE-2011-4219 State: PUBLISHED Published: 2011-11-01T19:00:00 Last Updated: 2024-08-07T00:01:51.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Investintech.com SlimPDF Reader does not prevent faulting-address data from affecting branch selection, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71097 - http://www.kb.cert.org/vuls/id/275036
CVE ID: CVE-2011-4220 State: PUBLISHED Published: 2011-11-01T19:00:00Z Last Updated: 2024-09-17T02:27:44.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/275036
CVE ID: CVE-2011-4221 State: PUBLISHED Published: 2011-11-01T19:00:00 Last Updated: 2024-08-07T00:01:51.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71096 - http://www.kb.cert.org/vuls/id/275036
CVE ID: CVE-2011-4222 State: PUBLISHED Published: 2011-11-01T19:00:00 Last Updated: 2024-08-07T00:01:51.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71095 - http://www.kb.cert.org/vuls/id/275036
CVE ID: CVE-2011-4223 State: PUBLISHED Published: 2011-11-01T19:00:00 Last Updated: 2024-08-07T00:01:51.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Investintech.com Absolute PDF Server allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71094 - http://www.kb.cert.org/vuls/id/275036
CVE ID: CVE-2011-4231 State: PUBLISHED Published: 2012-05-03T10:00:00Z Last Updated: 2024-09-16T20:07:13.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to cause a denial of service (segmentation fault and device crash) via unspecified vectors, aka Bug ID CSCtq61128. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/ios/ios_xe/3/release/notes/asr1k_caveats_34s.html - http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-4MCAVS.html
CVE ID: CVE-2011-4232 State: PUBLISHED Published: 2012-05-03T10:00:00 Last Updated: 2024-08-07T00:01:51.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53432 - http://www.cisco.com/en/US/docs/voice_ip_comm/meetingplace/6_1/release_notes/mp61_rn.pdf
CVE ID: CVE-2011-4237 State: PUBLISHED Published: 2012-05-03T10:00:00 Last Updated: 2024-08-07T00:01:51.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter, aka Bug ID CSCtu18693. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49094 - http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.2/release/notes/lms42rel.html - http://www.nessus.
ww.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.2/release/notes/lms42rel.html - http://www.nessus.org/plugins/index.php?view=single&id=58950
CVE ID: CVE-2011-4244 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-16T20:16:31.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the RealVideo renderer in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4245 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-16T17:29:02.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RealVideo renderer in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4246 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-16T19:19:20.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AAC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4247 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-17T00:17:10.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted QCELP stream. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4248 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-17T00:20:36.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed AAC file. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4249 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-17T02:41:43.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the RV30 codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4250 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-16T22:03:36.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ATRC codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4251 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-17T01:22:04.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4252 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-17T01:05:38.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4253 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-17T04:09:08.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the RV20 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4254 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-16T19:36:54.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4255 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-16T23:56:04.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via an invalid codec name. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4256 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-16T18:43:41.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4257 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-16T23:31:59.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cook codec in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via crafted channel data. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4258 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-16T16:28:11.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4259 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-16T22:55:34.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted width value in an MPG file. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4260 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-17T03:37:53.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4261 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-17T04:04:51.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted video dimensions in an MP4 file. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4262 State: PUBLISHED Published: 2011-11-24T11:00:00Z Last Updated: 2024-09-16T18:09:12.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/11182011_player/en/
CVE ID: CVE-2011-4263 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-17T00:26:37.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Schneider Electric PowerChute Business Edition before 8.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000100 - http://jvn.jp/en/jp/JVN61695284/index.html
CVE ID: CVE-2011-4264 State: PUBLISHED Published: 2011-12-08T11:00:00Z Last Updated: 2024-09-16T19:35:03.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Etomite before 1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000101 - http://jvn.jp/en/jp/JVN04329324/index.html
CVE ID: CVE-2011-4265 State: PUBLISHED Published: 2011-12-08T11:00:00Z Last Updated: 2024-09-16T17:58:34.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpWebSite before 1.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN70502960/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000103
CVE ID: CVE-2011-4266 State: PUBLISHED Published: 2011-12-13T11:00:00Z Last Updated: 2024-09-17T04:19:43.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file, a different vulnerability than CVE-2011-3991. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000104 - http://sourceforge.jp/projects/ffftp/wiki/Security - http://jvn.jp/en/jp/JVN940
//jvndb.jvn.jp/jvndb/JVNDB-2011-000104 - http://sourceforge.jp/projects/ffftp/wiki/Security - http://jvn.jp/en/jp/JVN94002296/index.html
CVE ID: CVE-2011-4267 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4268 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4269 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4270 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4271 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4272 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4273 State: PUBLISHED Published: 2011-11-03T10:00:00 Last Updated: 2024-08-07T00:01:51.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML via (1) the group parameter to goform/AddGroup, related to addgroup.asp; (2) the url parameter to goform/AddAccessLimit, related to addlimit.asp; or the (3) user (aka User ID) or (4) group parameter to goform/AddUser, related to adduser.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/384427 - https://exchange.xforce.ibmcloud.com/vulnerab
E Program Container: References: - http://www.kb.cert.org/vuls/id/384427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70434 - http://secunia.com/advisories/46894