CVE-2011-5178: XSS
First published: Thu Sep 20 2012(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf in Infoblox NetMRI 6.0.2.42, 6.1.2, 6.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) eulaAccepted or (2) mode parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| mri | =6.1.2 | |
| mri | =6.0.2.42 | |
| mri | <=6.2.1 | |
| mri | =6.2.1.48 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.infoblox.com/community/downloads/hotfix-v602-netmri-8831gpg
- http://www.infoblox.com/community/downloads/hotfix-v612-netmri-8831gpg
- http://seclists.org/fulldisclosure/2011/Nov/158
- http://secunia.com/advisories/46854
- http://www.infoblox.com/community/downloads/hotfix-v621-netmri-8831gpg
- http://foregroundsecurity.com/secure-coding-and-security-qa/111-infoblox-netmri-621-612-and-60242-multiple-cross-site-scripting-xss
- http://www.securitytracker.com/id?1026319
Frequently Asked Questions
What is the severity of CVE-2011-5178?
CVE-2011-5178 is classified as a medium severity vulnerability due to its potential to allow remote attackers to inject arbitrary web scripts.
How do I fix CVE-2011-5178?
To fix CVE-2011-5178, it is recommended to upgrade to a patched version of Infoblox NetMRI that addresses the cross-site scripting vulnerabilities.
What are the affected versions for CVE-2011-5178?
CVE-2011-5178 affects Infoblox NetMRI versions 6.0.2.42, 6.1.2, and all versions up to and including 6.2.1.
Is CVE-2011-5178 a serious issue?
Yes, CVE-2011-5178 is serious as it exposes applications to cross-site scripting attacks, which can compromise security.
Who can exploit CVE-2011-5178?
Any remote attacker with access to the affected application can exploit CVE-2011-5178 by injecting malicious scripts through vulnerable parameters.
- agent/type
- agent/softwarecombine
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/infoblox
- canonical/mri
- version/mri/6.1.2
- version/mri/6.0.2.42
- version/mri/6.2.1
- version/mri/6.2.1.48