Unscored CVE-2011-4920 EUVD-2011-4831GHSA-7hg5-qmfc-g9mf

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbit…

Published Jan 4, 2012 · Updated Aug 7, 2024 · Assigned by redhat

Description

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbitrary web script or HTML via the URL to (1) e107_images/thumb.php or (2) rate.php, (3) resend_name parameter to e107_admin/users.php, and (4) link BBCode in user signatures.

References

78049 vdb-entry
46706 third-party-advisory
78047 vdb-entry
e107inc-multiple-xss(72010) vdb-entry
78048 vdb-entry
51253 vdb-entry
e107inc-usersignatures-xss(72104) vdb-entry
[oss-security] 20120104 Re: CVE-request: Multiple e107 vulnerabilities mailing-list