CVE-2011-5025

{"id": "CVE-2011-5025", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2011-12-29T11:55:10.250", "references": [{"url": "http://www.securityfocus.com/bid/51276", "source": "cve@mitre.org"}, {"url": "https://sitewat.ch/Advisory/View/4", "tags": ["URL Repurposed"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via (1) the tag parameter to editTag.yaws, (2) the index parameter to showOldPage.yaws, (3) the node parameter to allRefsToMe.yaws, or (4) the text parameter to editPage.yaws."}, {"lang": "es", "value": "Varias vulnerabilidades de ejecuci\u00f3n de comandos en sitios cruzados (XSS) en la aplicaci\u00f3n de wiki en Yaws v1.88 permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s de (1) el par\u00e1metro de etiqueta para editTag.yaws, (2) el par\u00e1metro de \u00edndice de showOldPage.yaws, (3) el par\u00e1metro de nodo a allRefsToMe.yaws , o (4) el par\u00e1metro de texto a editPage.yaws."}], "lastModified": "2024-02-14T01:17:43.863", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:yaws:yaws:1.88:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "482CFAEA-1426-4764-9B82-6D1A056C9295"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}