CVE-2011-3383

Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "the web page to be output."

• CWE-79

• http://jvn.jp/en/jp/JVN36684331/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/jvndb/JVNDB-2011-000080Third Party Advisory, VDB Entry
• http://jvn.jp/en/jp/JVN36684331/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/jvndb/JVNDB-2011-000080Third Party Advisory, VDB Entry

Published

Oct 24, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3377The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 an…
• CVE-2011-3378RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows rem…
• CVE-2011-3379The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to …
• CVE-2011-3380Openswan 2.6.29 through 2.6.35 allows remote attackers to ca…
• CVE-2011-3381Cross-site request forgery (CSRF) vulnerability in Phorum be…
• CVE-2011-3382Cross-site scripting (XSS) vulnerability in Phorum before 5.…
• CVE-2011-3384Cross-site scripting (XSS) vulnerability in the Sage add-on …
• CVE-2011-3385Cross-site scripting (XSS) vulnerability in WebsiteBaker bef…
• CVE-2011-3386Unspecified vulnerability in Medtronic Paradigm wireless ins…
• CVE-2011-3387The class file parser in IBM Java 1.4.2 SR13 FP9 allows remo…
• CVE-2011-3388Opera before 11.51 allows remote attackers to cause an insec…
• CVE-2011-3389The SSL protocol, as used in certain configurations in Micro…