CVE-2011-1838 Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via the origurl parameter to a (1) view scri...
MediumCVSS 4.3
EPSS 2.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via the origurl parameter to a (1) view script or (2) login script.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| twiki | <= 5.0.1 | No fix listed |
| twiki | = 4.0.0 | No fix listed |
| twiki | = 4.0.1 | No fix listed |
| twiki | = 4.0.2 | No fix listed |
| twiki | = 4.0.3 | No fix listed |
| twiki | = 4.0.4 | No fix listed |
| twiki | = 4.0.5 | No fix listed |
| twiki | = 4.1.0 | No fix listed |
| twiki | = 4.1.1 | No fix listed |
| twiki | = 4.1.2 | No fix listed |
| twiki | = 4.2.0 | No fix listed |
| twiki | = 4.2.1 | No fix listed |
| twiki | = 4.2.2 | No fix listed |
| twiki | = 4.2.3 | No fix listed |
| twiki | = 4.2.4 | No fix listed |
| twiki | = 4.3.0 | No fix listed |
| twiki | = 4.3.1 | No fix listed |
| twiki | = 4.3.2 | No fix listed |
| twiki | = 4.5.0 | No fix listed |
| twiki | = 5.0.0 | No fix listed |
References
- 44594 third-party-advisory vendor-advisory
- 8257 third-party-advisory
- 1025542 vdb-entry
- twiki.org patch
- www.mavitunasecurity.com exploit
- 20110518 XSS vulnerability in TWiki < 5.0.2 mailing-list
- 47899 exploit vdb-entry
- ADV-2011-1258 vdb-entry vendor-advisory