CVE-2011-5142 Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 2.4.0-rc13 and probably earlier allow remote attackers to inject arbitrary web script or HTML via the (1) tf_deleg...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 2.4.0-rc13 and probably earlier allow remote attackers to inject arbitrary web script or HTML via the (1) tf_delegation, (2) tf_ip, or (3) tf_name parameter in a search action to host/host_index.php; (4) login parameter to obm.php; or (5) tf_user parameter in a search action to group/group_index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| obm open business management | <= 2.4.0 | No fix listed |
References
- 78007 vdb-entry
- 78008 vdb-entry
- 47139 third-party-advisory vendor-advisory
- obm-multiple-xss(71923) vdb-entry
- www.htbridge.ch exploit vendor-advisory