CVE-2011-4647

{"id": "CVE-2011-4647", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2011-11-30T19:55:08.653", "references": [{"url": "http://osvdb.org/76297", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://project.geeklog.net/cgi-bin/hgwebdir.cgi/geeklog/rev/fd3ca3aebf86", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "http://project.geeklog.net/tracking/view.php?id=1368", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/46348/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.geeklog.net/article.php/geeklog-1.8.1", "tags": ["Patch"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in the story creation feature in Geeklog 1.8.0 allow remote attackers to inject arbitrary web script or HTML via the (1) code or (2) raw BBcode tags."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la funcionalidad de creacci\u00f3n de historias (\"story creation feature\") de Geeklog 1.8.0. Permite a usuarios remotos inyectar codigo de script web o c\u00f3digo HTML de su elecci\u00f3n a trav\u00e9s de las etiquetas (1) code o (2) raw BBcode."}], "lastModified": "2011-12-01T05:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:geeklog:geeklog:1.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28B4EC65-BC5A-439D-8598-08626C6E68FE"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}