CVE-2011-1427: XSS

Published Mar 15, 2011

Updated

Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 5.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Language parameter to Pages/login.aspx, (2) HeaderWarning parameter to Troubleshooting/DiagnosticReport.asp, or (3) User-Agent header to troubleshooting/speedtest.asp.

Affected Software

1 affected component

Kodak InSite=5.5.2

Event History

Mar 15, 2011

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-1427?

CVE-2011-1427 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2011-1427?

To fix CVE-2011-1427, you should update Kodak InSite to a secure version that addresses these vulnerabilities.

What type of attacks can CVE-2011-1427 enable?

CVE-2011-1427 can enable remote attackers to perform cross-site scripting (XSS) attacks, injecting arbitrary scripts into web pages.

Which parameters are exploited in CVE-2011-1427?

CVE-2011-1427 is exploited through the Language parameter in Pages/login.aspx, HeaderWarning in Troubleshooting/DiagnosticReport.asp, and the User-Agent header.

Which software version is affected by CVE-2011-1427?

CVE-2011-1427 affects Kodak InSite version 5.5.2.