Unscored severity · published Apr 18, 2011
CVE-2011-1714
Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to inject arbitrary web script or HTML via the callback parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QO
Qooxdoo · Qooxdoo
1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1714
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1714
blog.eyeos.org
http://blog.eyeos.org/en/2011/04/07/about-some-eyeos-security-issues/
Exploit
http://osvdb.org/71718
osvdb.org
http://osvdb.org/71720
Vendor Advisory
http://secunia.com/advisories/43818
Vendor Advisory
http://secunia.com/advisories/43997
Exploit
http://www.autosectools.com/Advisories/eyeOS.2.3_Reflected.Cross-site.Scripting_172.html
More from Qooxdoo
–
CVE-2011-1715
Directory traversal vulnerability in framework/source/resource/qx/test/part/delay.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other…