CVE-2011-0509

Cross-site scripting (XSS) vulnerability in Vaadin before 6.4.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the index page.

• CWE-79

• http://dev.vaadin.com/ticket/6257Issue Tracking, Vendor Advisory
• http://osvdb.org/70398Broken Link
• http://secunia.com/advisories/42879Vendor Advisory
• http://vaadin.com/download/release/6.4/6.4.9/release-notes.htmlVendor Advisory
• http://www.securityfocus.com/bid/45779Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64626VDB Entry
• http://dev.vaadin.com/ticket/6257Issue Tracking, Vendor Advisory
• http://osvdb.org/70398Broken Link
• http://secunia.com/advisories/42879Vendor Advisory
• http://vaadin.com/download/release/6.4/6.4.9/release-notes.htmlVendor Advisory
• http://www.securityfocus.com/bid/45779Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64626VDB Entry

Published

Jan 20, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0503Cross-site request forgery (CSRF) vulnerability in VaM Shop …
• CVE-2011-0504Multiple cross-site scripting (XSS) vulnerabilities in VaM S…
• CVE-2011-0505Directory traversal vulnerability in system/system.php in Zw…
• CVE-2011-0506Directory traversal vulnerability in modules/profile/user.ph…
• CVE-2011-0507FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 173…
• CVE-2011-0508Cross-site scripting (XSS) vulnerability in system/modules/c…
• CVE-2011-0510SQL injection vulnerability in cart.php in Advanced Webhost …
• CVE-2011-0511SQL injection vulnerability in the allCineVid component (com…
• CVE-2011-0512SQL injection vulnerability in team.php in the Teams Structu…
• CVE-2011-0513DCR.sys driver in SecurStar DriveCrypt 5.4, 5.3, and earlier…
• CVE-2011-0514The RDS service (rds.exe) in HP Data Protector Manager 6.11 …
• CVE-2011-0515KisKrnl.sys 2011.1.13.89 and earlier in Kingsoft AntiVirus 2…