CVE-2011-0451

Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/cart_tag.tpl in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
VendorProductVersion
lockonec-cube
𝑥
≤ 2.4.3
lockonec-cube
1.1.0:beta
lockonec-cube
1.1.1
lockonec-cube
1.2.0:beta
lockonec-cube
1.3.0
lockonec-cube
1.3.0:beta
lockonec-cube
1.3.1
lockonec-cube
1.3.1:a
lockonec-cube
1.3.2
lockonec-cube
1.3.3
lockonec-cube
1.3.4
lockonec-cube
1.3.4:community
lockonec-cube
1.4.0:a-beta
lockonec-cube
1.4.0:beta
lockonec-cube
1.4.1:beta
lockonec-cube
1.4.2:beta
lockonec-cube
1.4.3:a-beta
lockonec-cube
1.4.3:b-beta
lockonec-cube
1.4.3:beta
lockonec-cube
1.4.5
lockonec-cube
1.4.6
lockonec-cube
1.4.7
lockonec-cube
1.5.0:beta
lockonec-cube
2.0.0:beta
lockonec-cube
2.0.1
lockonec-cube
2.0.1:a
lockonec-cube
2.1.0:beta
lockonec-cube
2.1.2
lockonec-cube
2.1.2:a
lockonec-cube
2.2.0:beta
lockonec-cube
2.2.1:one
lockonec-cube
2.3.0
lockonec-cube
2.3.0:rc1
lockonec-cube
2.3.1
lockonec-cube
2.3.3
lockonec-cube
2.3.4
lockonec-cube
2.4.0
lockonec-cube
2.4.0:rc1
lockonec-cube
2.4.1
lockonec-cube
2.4.2
lockonec-cube
2.4.4
lockonec-cube
2.11.0:beta
𝑥
= Vulnerable software versions