Description

Multiple cross-site scripting (XSS) vulnerabilities in Contao before 2.10.2 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php in a (1) teachers.html or (2) teachers/ action.

Remediation

References

CVE-2011-4335

Related Vulnerabilities

Oracle Database Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2018-10237)

WordPress Plugin Frontend File Manager Multiple Vulnerabilities (21.2)

MySQL Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-1848)

Magento Cryptographic Issues Vulnerability (CVE-2019-7886)

e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-2750)

Severity

Medium

Classification

CVE-2011-4335 CWE-707

Tags

Missing Update Known Vulnerabilities