CVE-2011-5019 in Textpattern
Summary
Cross-site scripting (XSS) vulnerability in setup/index.php in Textpattern CMS 4.4.1, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the ddb parameter.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
12/27/2011
Disclosure
01/05/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 59887 | Textpattern cross site scripting | 79 | Proof-of-Concept | Not defined | CVE-2011-5019 |