CVE-2011-5160: XSS
Published Sep 9, 2012
·Updated
Cross-site scripting (XSS) vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web script or HTML via the site parameter.
Affected Software
3 affected components
open-emr Openemr=4.0.0
open-emr Openemr=4.1.1
open-emr Openemr=4.1.0
Event History
Sep 9, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-5160?
CVE-2011-5160 is considered a medium severity vulnerability due to its potential to allow cross-site scripting attacks.
2
How do I fix CVE-2011-5160?
To mitigate CVE-2011-5160, upgrade OpenEMR to a version later than 4.1.1 where the issue has been resolved.
3
What types of attacks can CVE-2011-5160 facilitate?
CVE-2011-5160 can facilitate cross-site scripting (XSS) attacks that could compromise website integrity and user data.
4
Which versions of OpenEMR are affected by CVE-2011-5160?
CVE-2011-5160 affects OpenEMR versions 4.0.0, 4.1.0, and 4.1.1.
5
Is CVE-2011-5160 publicly known, and how can it be exploited?
Yes, CVE-2011-5160 is publicly documented, and it can be exploited by injecting malicious scripts via the 'site' parameter in setup.php.