CVE-2011-4827

Multiple cross-site scripting (XSS) vulnerabilities in AutoSec Tools V-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) p parameter to redirect.php and (2) box parameter to includes/TrueColorPicker/index.php, which is not properly handled in includes/TrueColorPicker/class.TrueColorPicker.php.

• CWE-79

• http://secunia.com/advisories/46861Vendor Advisory
• http://www.autosectools.com/Advisory/V-CMS-1.0-Reflected-Cross-site-Scripting-234Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/50706Exploit
• http://secunia.com/advisories/46861Vendor Advisory
• http://www.autosectools.com/Advisory/V-CMS-1.0-Reflected-Cross-site-Scripting-234Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/50706Exploit

Published

Dec 15, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4821Directory traversal vulnerability in the TFTP server in D-Li…
• CVE-2011-4822Multiple cross-site scripting (XSS) vulnerabilities in the u…
• CVE-2011-4823Multiple SQL injection vulnerabilities in Vik Real Estate (c…
• CVE-2011-4824SQL injection vulnerability in auth_login.php in Cacti befor…
• CVE-2011-4825Static code injection vulnerability in inc/function.base.php…
• CVE-2011-4826SQL injection vulnerability in session.php in AutoSec Tools …
• CVE-2011-4828Unrestricted file upload vulnerability in includes/inline_im…
• CVE-2011-4829SQL injection vulnerability in the com_listing component in …
• CVE-2011-4830Multiple cross-site scripting (XSS) vulnerabilities in the c…
• CVE-2011-4831Directory traversal vulnerability in webFileBrowser.php in W…
• CVE-2011-4832Directory traversal vulnerability in CaupoShop Pro 2.x, Caup…
• CVE-2011-4833Multiple SQL injection vulnerabilities in the Leads module i…