CVE-2011-4541: XSS
Published Nov 29, 2011
·Updated
Cross-site scripting (XSS) vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action.
Affected Software
29 affected components
Hastymail Hastymail2=beta1
Hastymail Hastymail2=beta2
Hastymail Hastymail2=beta3
Hastymail Hastymail2=rc1
Hastymail Hastymail2=rc2
Hastymail Hastymail2=rc3
Hastymail Hastymail2=rc4
Hastymail Hastymail2=rc5
Hastymail Hastymail2=rc6
Hastymail Hastymail2=rc7
Hastymail Hastymail2=rc8
Hastymail Hastymail2=rc9
Hastymail Hastymail2<=2.1.1
Hastymail Hastymail2=1.0
Hastymail Hastymail2=1.01
Hastymail Hastymail2=1.1-rc1
Hastymail Hastymail2=1.1-rc2
Hastymail Hastymail2=2.0
Hastymail Hastymail2=2.0-a1
Hastymail Hastymail2=2.0-a2
Hastymail Hastymail2=2.0-b1
Hastymail Hastymail2=2.0-b2
Hastymail Hastymail2=2.0-b3
Hastymail Hastymail2=2.0-rc1
Hastymail Hastymail2=2.0.1
Hastymail Hastymail2=2.0.2
Hastymail Hastymail2=2.0.3
Hastymail Hastymail2=2.0.4
Hastymail Hastymail2=2.0.5
Event History
Nov 29, 2011
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4541?
The severity of CVE-2011-4541 is classified as medium due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2011-4541?
To fix CVE-2011-4541, you should validate and sanitize user inputs for the 'rs' parameter in the index.php file.
3
Who is affected by CVE-2011-4541?
CVE-2011-4541 affects versions of Hastymail2 prior to RC2, including various beta and release candidate versions.
4
What type of vulnerability is CVE-2011-4541?
CVE-2011-4541 is a cross-site scripting (XSS) vulnerability that allows the injection of arbitrary web scripts or HTML.
5
Can CVE-2011-4541 be exploited remotely?
Yes, CVE-2011-4541 can be exploited remotely by attackers through the vulnerable 'rs' parameter.