CVE-2011-1714

Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to inject arbitrary web script or HTML via the callback parameter.

• CWE-79

• http://blog.eyeos.org/en/2011/04/07/about-some-eyeos-security-issues/
• http://osvdb.org/71718Exploit
• http://osvdb.org/71720
• http://secunia.com/advisories/43818Vendor Advisory
• http://secunia.com/advisories/43997Vendor Advisory
• http://www.autosectools.com/Advisories/eyeOS.2.3_Reflected.Cross-site.Scripting_172.htmlExploit
• http://www.exploit-db.com/exploits/17127Exploit
• http://www.securityfocus.com/bid/47184Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66574
• http://blog.eyeos.org/en/2011/04/07/about-some-eyeos-security-issues/
• http://osvdb.org/71718Exploit
• http://osvdb.org/71720
• http://secunia.com/advisories/43818Vendor Advisory
• http://secunia.com/advisories/43997Vendor Advisory
• http://www.autosectools.com/Advisories/eyeOS.2.3_Reflected.Cross-site.Scripting_172.htmlExploit
• http://www.exploit-db.com/exploits/17127Exploit
• http://www.securityfocus.com/bid/47184Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66574

Published

Apr 18, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1708Stack-based buffer overflow in nipplib.dll in Novell iPrint …
• CVE-2011-1709GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is…
• CVE-2011-1710Multiple integer overflows in the HTTP server in the Novell …
• CVE-2011-1711Unspecified vulnerability in the Mobility Pack 1.1.2 and ear…
• CVE-2011-1712The txXPathNodeUtils::getXSLTId function in txMozillaXPathTr…
• CVE-2011-1713Microsoft msxml.dll, as used in Internet Explorer 8 on Windo…
• CVE-2011-1715Directory traversal vulnerability in framework/source/resour…
• CVE-2011-1716Multiple cross-site scripting (XSS) vulnerabilities in the W…
• CVE-2011-1717Skype for Android stores sensitive user data without encrypt…
• CVE-2011-1718The Web Agents component in CA SiteMinder R6 before SP6 CR2 …
• CVE-2011-1719Multiple stack-based buffer overflows in the Web Viewer Acti…
• CVE-2011-1720The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.1…