CVE-2011-5249 Cross-site scripting (XSS) vulnerability in the events page in the System iNtrusion Analysis and Reporting Environment (SNARE) for Linux agent before 1.7.0 allows remote attackers to inject arbitrary....
MediumCVSS 4.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the events page in the System iNtrusion Analysis and Reporting Environment (SNARE) for Linux agent before 1.7.0 allows remote attackers to inject arbitrary web script or HTML via a logged shell command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intersectalliance system intrusion analysis and reporting environment | <= 1.5.1 | No fix listed |
| intersectalliance system intrusion analysis and reporting environment | = 1.4-1 | No fix listed |
| intersectalliance system intrusion analysis and reporting environment | = 1.4.1-1 | No fix listed |
| intersectalliance system intrusion analysis and reporting environment | = 1.4.1-2 | No fix listed |
| intersectalliance system intrusion analysis and reporting environment | = 1.5.0 | No fix listed |