CVE-2011-4265
Published Dec 8, 2011
Last updated 13 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in phpWebSite before 1.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Source
- vultures@jpcert.or.jp
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A82410BE-BF34-47F9-9E5D-3670869148C6",
"versionEndIncluding": "0.9.3.4"
},
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:0.7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47B0B838-401F-447D-A270-6B3C7416A2ED"
},
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:0.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90DF86C4-176B-4E4E-AF89-15F090E9C0F2"
},
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:0.8.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F3EAD02-CF8D-4154-9A67-9774BA4029AB"
},
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:0.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67BC3223-5F53-42FA-B872-DCB30E46032E"
},
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:0.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9176513-170C-4B51-8495-9ED2FB7D929F"
},
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:0.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0D431DA-8808-4DF2-BBD7-7BC6F5036DB5"
},
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:0.9.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7D4F2D0-23BE-4460-9C4A-8A30B1F06623"
},
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B72337C8-2B5C-4824-A3C0-D41A857DC9C8"
},
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "454BEBD6-3EC7-4FFB-A51A-0199B5CCF097"
},
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A381433-9331-4424-B349-52D7F4BFEABA"
},
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DC225BD-FA8E-482B-9537-77797B7A88BB"
},
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F5162C7-5B84-4B5E-85B7-31F9B4BBAF37"
},
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:0.10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6946104-0AEB-429E-9AE2-8E7045DC28AC"
},
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:0.10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E9D274F-AE4D-4064-ABA2-C0573EFE7DFE"
},
{
"criteria": "cpe:2.3:a:phpwebsite:phpwebsite:0.10.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F5A8763-F36A-4FF6-8BD2-8CC2B4250BA7"
}
],
"operator": "OR"
}
]
}
]