CVE-2011-5190
Last modified
CVE-2011-5190 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter to (1) signup.php, (2) lostpass.php, (3) login.php, (4) index.php, (5) help_tos.php, (6) help_contact.php, or (7) help.php.. EPSS estimates a 1.21% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter to (1) signup.php, (2) lostpass.php, (3) login.php, (4) index.php, (5) help_tos.php, (6) help_contact.php, or (7) help.php.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Clonemonster | Social Book Facebook Clone Monster | 2010 |
References
- http://secunia.com/advisories/47005Vendor Advisory
- http://secunia.com/advisories/47005Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-5190?
How severe is CVE-2011-5190?
How do I fix CVE-2011-5190?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-5184Multiple cross-site scripting (XSS) vulnerabilities in HP Ne…
- CVE-2011-5185Cross-site scripting (XSS) vulnerability in video_comments.p…
- CVE-2011-5186Cross-site scripting (XSS) vulnerability in jbshop.php in th…
- CVE-2011-5187Cross-site scripting (XSS) vulnerability in the Support Tick…
- CVE-2011-5188Cross-site scripting (XSS) vulnerability in the Support Time…
- CVE-2011-5189Cross-site scripting (XSS) vulnerability in the Webform Vali…
- CVE-2011-5191Cross-site scripting (XSS) vulnerability in pretty-bar.php i…
- CVE-2011-5192Cross-site scripting (XSS) vulnerability in pretty-bar.php i…
- CVE-2011-5193Cross-site scripting (XSS) vulnerability in vendors/samswhoi…
- CVE-2011-5194Cross-site scripting (XSS) vulnerability in vendors/samswhoi…
- CVE-2011-5195Cross-site request forgery (CSRF) vulnerability in index/man…
- CVE-2011-5196Cross-site request forgery (CSRF) vulnerability in index/man…
Are you affected by CVE-2011-5190?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST