Vulnerability Details CVE-2011-5040
Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitrary web script or HTML via the config parameter to (1) nalozi_naslov.php and (2) widget.dokumenti_lista.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.029
EPSS Ranking 85.7%
CVSS Severity
CVSS v2 Score 4.3
References
- http://www.exploit-db.com/exploits/18259
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5064.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71928
- http://www.exploit-db.com/exploits/18259
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5064.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71928
Products affected by CVE-2011-5040
-
cpe:2.3:a:infoproject:biznis_heroj:*