medium4.3Public exploit code
CVE-2011-5041
Multiple cross-site scripting (XSS) vulnerabilities in Pulse Pro CMS 1.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) d paramete…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Pulse Pro 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities2011-12-14 · webapps · php · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Pulse Pro CMS 1.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) d parameter in a blocks action and (2) post_id parameter in an edit-post action to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pulsecms | Pulse Cms | Version 1.7.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/77693
- http://packetstormsecurity.org/files/view/107830/pulsepro172-xss.txt
- http://secunia.com/advisories/47225
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71798
- http://osvdb.org/77693
- http://packetstormsecurity.org/files/view/107830/pulsepro172-xss.txt
- http://secunia.com/advisories/47225
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71798