mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 09:11:28 +00:00
126 lines
3.8 KiB
JSON
126 lines
3.8 KiB
JSON
{
|
|
"id": "CVE-2011-2743",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2011-07-19T21:55:00.743",
|
|
"lastModified": "2018-10-09T19:32:59.260",
|
|
"vulnStatus": "Modified",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to (1) the default URI or (2) includes/javascript.php, or the (3) title or (4) body parameter to admin/help.php."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "M\u00faltiples cross-site scripting (XSS) en Chyrp v2.1 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s del par\u00e1metro de acci\u00f3n: (1) la URI por defecto o (2) includes / javascript.php, o (3) el t\u00edtulo o (4) par\u00e1metros de cuerpo a admin / help.php."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "MEDIUM",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "NONE",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "NONE",
|
|
"baseScore": 4.3
|
|
},
|
|
"baseSeverity": "MEDIUM",
|
|
"exploitabilityScore": 8.6,
|
|
"impactScore": 2.9,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": true
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-79"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:chyrp:chyrp:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "2.1",
|
|
"matchCriteriaId": "7E12A398-5363-4270-95FB-D63F2A48E42B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:chyrp:chyrp:2.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "98801229-48D2-4E7C-A265-D9C491A4E3D5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:chyrp:chyrp:2.1:beta1:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A971C020-10BE-4104-BAA1-7F2AA3ADC67C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:chyrp:chyrp:2.1:beta2:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BCB4ADC9-A75F-4C0F-AC8A-151457DA8DC1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:chyrp:chyrp:2.1:rc:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9B551CE4-0EE0-4C38-99FC-971EDE95E25E"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://securityreason.com/securityalert/8312",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.justanotherhacker.com/advisories/JAHx113.txt",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Exploit"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.ocert.org/advisories/ocert-2011-001.html",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/archive/1/518890/100/0/threaded",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/48672",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Exploit"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68563",
|
|
"source": "cve@mitre.org"
|
|
}
|
|
]
|
|
} |