CVE-2011-5040 Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitrary web script or HTML via the config parameter to (1) nalozi_naslov.php and (2)....
MediumCVSS 4.3
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitrary web script or HTML via the config parameter to (1) nalozi_naslov.php and (2) widget.dokumenti_lista.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| infoproject biznis heroj | All versions | No fix listed |
References
- 18259 exploit
- www.zeroscience.mk exploit
- infoproject-config-xss(71928) vdb-entry