CVE-2011-5190

Multiple cross-site scripting (XSS) vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter to (1) signup.php, (2) lostpass.php, (3) login.php, (4) index.php, (5) help_tos.php, (6) help_contact.php, or (7) help.php.
Configurations

Configuration 1 (hide)

cpe:2.3:a:clonemonster:social_book_facebook_clone_monster:2010:*:*:*:*:*:*:*

History

No history.

Information

Published : 2012-09-20 10:55

Updated : 2024-02-28 12:00


NVD link : CVE-2011-5190

Mitre link : CVE-2011-5190

CVE.ORG link : CVE-2011-5190


JSON object : View

Products Affected

clonemonster

  • social_book_facebook_clone_monster
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')