CVE-2011-5081 Cross-site scripting (XSS) vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share pa...
MediumCVSS 4.3
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a RestoreFile action to index.cgi.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/backuppc(Debian:12) | < 3.1.0-9.1 | 3.1.0-9.1 |
| debian/backuppc(Debian:13) | < 3.1.0-9.1 | 3.1.0-9.1 |
| debian/backuppc(Debian:14) | < 3.1.0-9.1 | 3.1.0-9.1 |
| backuppc | = 3.1.0 | No fix listed |
| backuppc | = 3.2.1 | No fix listed |
References
- Debian Security Tracker CVE-2011-5081 vendor-advisory
- 20110428 HTB22965: Multiple XSS vulnerabilities in BackupPC mailing-list patch
- 44385 third-party-advisory vendor-advisory
- 72055 vdb-entry
- backuppc-index-xss(67170) vdb-entry
- www.htbridge.ch exploit
- bugs.debian.org issue-tracking