CVE-2011-1129 in SMF

Resumen (Inglés)

Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a save_items action.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2011-03-02

Divulgación

2011-06-20

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
57739	Simplemachines SMF ManageNews.php EditNews secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2011-1129

Fuentes

• MITRE
• NVD
• CVE Details