CVE-2011-5142

Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 2.4.0-rc13 and probably earlier allow remote attackers to inject arbitrary web script or HTML via the (1) tf_delegation, (2) tf_ip, or (3) tf_name parameter in a search action to host/host_index.php; (4) login parameter to obm.php; or (5) tf_user parameter in a search action to group/group_index.php.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
VendorProductVersion
obmopen_business_management
𝑥
≤ 2.4.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
obm
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
dne
utopic
dne
trusty
dne
saucy
dne
raring
dne
quantal
ignored
precise
ignored
oneiric
ignored
natty
ignored
lucid
ignored
hardy
ignored
Common Weakness Enumeration
References
http://osvdb.org/78007
http://osvdb.org/78008
http://secunia.com/advisories/47139
https://exchange.xforce.ibmcloud.com/vulnerabilities/71923
https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_obm.html
http://osvdb.org/78007
http://osvdb.org/78008
http://secunia.com/advisories/47139
https://exchange.xforce.ibmcloud.com/vulnerabilities/71923
https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_obm.html