CVE-2011-4814
Published Dec 14, 2011
Last updated 2 years ago
Overview
- Description
- Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) admin/boxes.php, (3) comm/clients.php, (4) commande/index.php; and the optioncss parameter to (5) admin/ihm.php and (6) user/home.php.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:*:rc:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8435A171-ACA4-4931-B646-E829980EB50B",
"versionEndIncluding": "3.1.0"
},
{
"criteria": "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:2.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A142CF43-7F6C-458D-A33A-95122F9FFD1B"
},
{
"criteria": "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:2.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B60D0BC1-9AD6-423B-854E-1220D5ABD816"
},
{
"criteria": "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:2.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5708BC71-BFEE-45C8-AD13-0EB80A3A9061"
},
{
"criteria": "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:2.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D72FE70D-4B44-4E4A-A329-A0C4ADD9BA77"
},
{
"criteria": "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:2.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D7F53EC-2A03-451E-B10D-4C5B948459EB"
},
{
"criteria": "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:2.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E1C8870-EFA2-409E-8117-BFA501D5175C"
},
{
"criteria": "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:2.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CFBFBAA-2FA6-4E79-AD8C-F25C0F32B38A"
},
{
"criteria": "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:2.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "076C9D6B-D37B-4F85-8742-210B52BC3F1E"
},
{
"criteria": "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:3.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2ADB858-5C11-4ADC-B199-50D44CA9B625"
},
{
"criteria": "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5097EB36-40E2-4C73-B5B1-787917BE22F3"
}
],
"operator": "OR"
}
]
}
]