CVE-2011-1427 Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 5.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Language parameter to Pages/login.aspx, (2) HeaderWa...
MediumCVSS 4.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 5.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Language parameter to Pages/login.aspx, (2) HeaderWarning parameter to Troubleshooting/DiagnosticReport.asp, or (3) User-Agent header to troubleshooting/speedtest.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kodak insite | = 5.5.2 | No fix listed |
References
- 8135 third-party-advisory
- 20110307 InSite Troubleshooting Cross-Site Scripting mailing-list
- 20110307 Kodak InSite Login Page Cross-Site Scripting mailing-list
- 46762 exploit vdb-entry
- kodakinsite-multiple-xss(65941) vdb-entry