CVE-2011-5019 in Textpattern

Sumário (Inglês)

Cross-site scripting (XSS) vulnerability in setup/index.php in Textpattern CMS 4.4.1, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the ddb parameter.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

27/12/2011

Divulgação

05/01/2012

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
59887	Textpattern Script de Site Cruzado	79	Prova de conceito	Não definido	CVE-2011-5019

Fontes

• MITRE
• NVD
• CVE Details