CVE-2011-5178

Multiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf in Infoblox NetMRI 6.0.2.42, 6.1.2, 6.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) eulaAccepted or (2) mode parameter.

• CWE-79

• http://foregroundsecurity.com/secure-coding-and-security-qa/111-infoblox-netmri-621-612-and-60242-multiple-cross-site-scripting-xssExploit
• http://seclists.org/fulldisclosure/2011/Nov/158Exploit
• http://secunia.com/advisories/46854Vendor Advisory
• http://www.infoblox.com/community/downloads/hotfix-v602-netmri-8831gpgVendor Advisory
• http://www.infoblox.com/community/downloads/hotfix-v612-netmri-8831gpgVendor Advisory
• http://www.infoblox.com/community/downloads/hotfix-v621-netmri-8831gpgVendor Advisory
• http://www.securitytracker.com/id?1026319Exploit
• http://foregroundsecurity.com/secure-coding-and-security-qa/111-infoblox-netmri-621-612-and-60242-multiple-cross-site-scripting-xssExploit
• http://seclists.org/fulldisclosure/2011/Nov/158Exploit
• http://secunia.com/advisories/46854Vendor Advisory
• http://www.infoblox.com/community/downloads/hotfix-v602-netmri-8831gpgVendor Advisory
• http://www.infoblox.com/community/downloads/hotfix-v612-netmri-8831gpgVendor Advisory
• http://www.infoblox.com/community/downloads/hotfix-v621-netmri-8831gpgVendor Advisory
• http://www.securitytracker.com/id?1026319Exploit

Published

Sep 20, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-5172Stack-based buffer overflow in StoryBoard Quick 6 Build 3786…
• CVE-2011-5173Buffer overflow in Bugbear Entertainment FlatOut 2005 allows…
• CVE-2011-5174Buffer overflow in Intel Trusted Execution Technology (TXT) …
• CVE-2011-5175SQL injection vulnerability in search.php in Banana Dance, p…
• CVE-2011-5176Multiple cross-site scripting (XSS) vulnerabilities in searc…
• CVE-2011-5177Multiple cross-site scripting (XSS) vulnerabilities in admin…
• CVE-2011-5179Cross-site scripting (XSS) vulnerability in skysa-official/s…
• CVE-2011-5180Cross-site scripting (XSS) vulnerability in wp-1pluginjquery…
• CVE-2011-5181Cross-site scripting (XSS) vulnerability in clickdesk.php in…
• CVE-2011-5182Cross-site scripting (XSS) vulnerability in lanoba-social-pl…
• CVE-2011-5183Multiple SQL injection vulnerabilities in OrderSys 1.6.4 and…
• CVE-2011-5184Multiple cross-site scripting (XSS) vulnerabilities in HP Ne…