CVE-2011-5206 Cross-site scripting (XSS) vulnerability in notes.php in Rapidleech before 2.3 rev42 SVN r399 allows remote attackers to inject arbitrary web script or HTML via the notes parameter.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in notes.php in Rapidleech before 2.3 rev42 SVN r399 allows remote attackers to inject arbitrary web script or HTML via the notes parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rapidleech | <= 2.3 | No fix listed |
| rapidleech | = 2.3-v42_svn322 | No fix listed |
| rapidleech | = rev36 | No fix listed |
References
- code.google.com
- code.google.com exploit
- 47434 third-party-advisory vendor-advisory
- rapidleech-notes-xss(72072) vdb-entry