CVE-2011-2958 Multiple cross-site scripting (XSS) vulnerabilities in Ecava IntegraXor before 3.60 (Build 4080) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Ecava IntegraXor before 3.60 (Build 4080) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ecava integraxor | <= 3.60.4061 | No fix listed |
| ecava integraxor | = 3.5.3900.5 | No fix listed |
| ecava integraxor | = 3.5.3900.10 | No fix listed |
| ecava integraxor | = 3.6.4000.0 | No fix listed |
| ecava integraxor | = 3.60 | No fix listed |
References
- www.integraxor.com
- www.us-cert.gov patch us-government-resource
- integraxor-unspecified-xss(68896) vdb-entry