← Back

CVE-2011-0457

nvd nist
Published: Mar 15, 2011Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in e107 0.7.22 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (65)

Products: E107: E107
E107
1 product
E107
Configuration A
65 vulnerable
Vulnerable SoftwareAffected Versions
E107
E107
Up to 0.7.22
E107
Version 0.545
E107
Version 0.547 beta
E107
Version 0.548 beta
E107
Version 0.549 beta
E107
Version 0.551 beta
E107
Version 0.552 beta
E107
Version 0.553 beta
E107
Version 0.554
E107
Version 0.554 beta
E107
Version 0.555 beta
E107
Version 0.600
E107
Version 0.601
E107
Version 0.602
E107
Version 0.603
E107
Version 0.604
E107
Version 0.605
E107
Version 0.606
E107
Version 0.607
E107
Version 0.608
E107
Version 0.609
E107
Version 0.610
E107
Version 0.611
E107
Version 0.612
E107
Version 0.613
E107
Version 0.614
E107
Version 0.615
E107
Version 0.615a
E107
Version 0.616
E107
Version 0.6171
E107
Version 0.6172
E107
Version 0.6173
E107
Version 0.6174
E107
Version 0.6175
E107
Version 0.617
E107
Version 0.6_10
E107
Version 0.6_11
E107
Version 0.6_12
E107
Version 0.6_13
E107
Version 0.6_14
E107
Version 0.6_15
E107
Version 0.6_15a
E107
Version 0.7.0
E107
Version 0.7.10
E107
Version 0.7.11
E107
Version 0.7.12
E107
Version 0.7.13
E107
Version 0.7.14
E107
Version 0.7.15
E107
Version 0.7.16
E107
Version 0.7.17
E107
Version 0.7.18
E107
Version 0.7.19
E107
Version 0.7.1
E107
Version 0.7.20
E107
Version 0.7.21
E107
Version 0.7.2
E107
Version 0.7.3
E107
Version 0.7.4
E107
Version 0.7.5
E107
Version 0.7.6
E107
Version 0.7.7
E107
Version 0.7.8
E107
Version 0.7.9
E107
Version 0.7

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (6)

Source: vultures@jpcert.or.jp
Patch
Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.