Vulnerability Description
Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "the web page to be output."
CVSS Score
4.3
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Kent-Web | Web Forum | <= 5.1 |
Related Weaknesses (CWE)
References
- http://jvn.jp/en/jp/JVN36684331/index.htmlThird Party AdvisoryVDB Entry
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000080Third Party AdvisoryVDB Entry
- http://jvn.jp/en/jp/JVN36684331/index.htmlThird Party AdvisoryVDB Entry
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000080Third Party AdvisoryVDB Entry
FAQ
What is CVE-2011-3383?
CVE-2011-3383 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "the web page to be output."
How severe is CVE-2011-3383?
CVE-2011-3383 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-3383?
Check the references section above for vendor advisories and patch information. Affected products include: Kent-Web Web Forum.