Description

Multiple cross-site scripting (XSS) vulnerabilities in Contao before 2.10.2 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php in a (1) teachers.html or (2) teachers/ action.

Remediation

References

CVE-2011-4335

Related Vulnerabilities

MySQL CVE-2012-0540 Vulnerability (CVE-2012-0540)

Joomla! Core Cross-Site Scripting (1.5.0 - 3.7.3)

PHP Use of Uninitialized Resource Vulnerability (CVE-2019-11038)

OpenSSL Improper Input Validation Vulnerability (CVE-2016-6302)

OpenSSL Cryptographic Issues Vulnerability (CVE-2005-2946)

Severity

Medium

Classification

CVE-2011-4335 CWE-707

Tags

Missing Update Known Vulnerabilities