Lucene search
MitreCVELIST:CVE-2011-1714HistoryApr 18, 2011 - 6:00 p.m.
CVE-2011-1714
2011-04-1818:00:00
mitre
www.cve.org
2
Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to inject arbitrary web script or HTML via the callback parameter.
References
blog.eyeos.org/en/2011/04/07/about-some-eyeos-security-issues/
osvdb.org/71718
osvdb.org/71720
secunia.com/advisories/43818
secunia.com/advisories/43997
www.autosectools.com/Advisories/eyeOS.2.3_Reflected.Cross-site.Scripting_172.html
www.exploit-db.com/exploits/17127
www.securityfocus.com/bid/47184
exchange.xforce.ibmcloud.com/vulnerabilities/66574
Related
osv
osv
QooxDoo XSS in Callback Parameter
2022-05-17 01:59:37
github
github
QooxDoo XSS in Callback Parameter
2022-05-17 01:59:37
cve
cve
CVE-2011-1714
2011-04-18 18:55:02
prion
prion
Cross site scripting
2011-04-18 18:55:00
nvd
nvd
CVE-2011-1714
2011-04-18 18:55:02
exploitdb
exploitdb
eyeos 2.3 - Multiple Vulnerabilities
2011-04-06 00:00:00