CVE-2011-3344

A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by injecting arbitrary web script or HTML via the URI. This can lead to information disclosure or unauthorized actions within the user's browser session.

• CWE-79
• CWE-79

• http://www.redhat.com/support/errata/RHSA-2011-1299.htmlPatch, Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2011-3344
• https://bugzilla.redhat.com/show_bug.cgi?id=731647Vendor Advisory
• https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=890781d7ec983e32fe83af2f7c033d087292851f
• https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.htmlVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2011-1299.htmlPatch, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=731647Vendor Advisory
• https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=890781d7ec983e32fe83af2f7c033d087292851f
• https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.htmlVendor Advisory

Published

Feb 5, 2014

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3337eEye Audit ID 2499 in eEye Digital Security Audits 2406 thro…
• CVE-2011-3339Cross-site scripting (XSS) vulnerability in the Admin Contro…
• CVE-2011-3340SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP a…
• CVE-2011-3341Multiple off-by-one errors in order_cmd.cpp in OpenTTD befor…
• CVE-2011-3342Multiple buffer overflows in OpenTTD before 1.1.3 allow remo…
• CVE-2011-3343Multiple buffer overflows in OpenTTD before 1.1.3 allow loca…
• CVE-2011-3345ulp/sdp/sdp_proc.c in the ib_sdp module (aka ib_sdp.ko) in t…
• CVE-2011-3346Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in Q…
• CVE-2011-3347A certain Red Hat patch to the be2net implementation in the …
• CVE-2011-3348The mod_proxy_ajp module in the Apache HTTP Server before 2.…
• CVE-2011-3349lightdm before 0.9.6 writes in .dmrc and Xauthority files us…7.8
• CVE-2011-3350masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in…9.8