Deskripsi CVE

Multiple cross-site scripting (XSS) vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) modules/admin/admin_module_index.php, or (3) modules/calendar/customise_calendar_times.php; login[] parameter to (4) index.php or (5) pub/clients.php; or framed parameter to (6) licence/index.php or (7) licence/view.php.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-79	Improper Neutralization of Input During Web Page Generation The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	4.3		AV:N/AC:M/Au:N/C:N/I:P/A:N	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Informasi eksploitasi

Exploit Database EDB-ID : 36453

Tanggal publikasi : 2011-12-13 23h00 +00:00
Penulis : High-Tech Bridge SA
Terverifikasi EDB : Yes

Exploit Database EDB-ID : 36451

Tanggal publikasi : 2011-12-13 23h00 +00:00
Penulis : High-Tech Bridge SA
Terverifikasi EDB : Yes

Exploit Database EDB-ID : 36454

Tanggal publikasi : 2011-12-13 23h00 +00:00
Penulis : High-Tech Bridge SA
Terverifikasi EDB : Yes

Exploit Database EDB-ID : 36450

Tanggal publikasi : 2011-12-13 23h00 +00:00
Penulis : High-Tech Bridge SA
Terverifikasi EDB : Yes

Produk yang Disebutkan

Konfigurasi 0

Browsercrm>>Browsercrm >> Version Hingga (termasuk) 5.100.01

Browsercrm>>Browsercrm >> Version 4.604.01

Browsercrm>>Browsercrm >> Version 4.605.00

Browsercrm>>Browsercrm >> Version 4.607.00

Browsercrm>>Browsercrm >> Version 4.610.00

Browsercrm>>Browsercrm >> Version 4.611.01

Browsercrm>>Browsercrm >> Version 4.612.00

Browsercrm>>Browsercrm >> Version 4.614.00

Browsercrm>>Browsercrm >> Version 4.615.10

Browsercrm>>Browsercrm >> Version 4.615.11

Browsercrm>>Browsercrm >> Version 4.616.00

Browsercrm>>Browsercrm >> Version 4.617.00

Browsercrm>>Browsercrm >> Version 4.619.00

Browsercrm>>Browsercrm >> Version 4.620.01

Browsercrm>>Browsercrm >> Version 4.622.00

Browsercrm>>Browsercrm >> Version 4.624.00

Browsercrm>>Browsercrm >> Version 4.624.01

Browsercrm>>Browsercrm >> Version 4.624.50

Browsercrm>>Browsercrm >> Version 4.624.60

Browsercrm>>Browsercrm >> Version 4.624.70

Browsercrm>>Browsercrm >> Version 4.624.80

Browsercrm>>Browsercrm >> Version 4.624.90

Browsercrm>>Browsercrm >> Version 4.691.01

Browsercrm>>Browsercrm >> Version 4.999.20

Browsercrm>>Browsercrm >> Version 5.000.00

Browsercrm>>Browsercrm >> Version 5.000.01

Browsercrm>>Browsercrm >> Version 5.001.00

Browsercrm>>Browsercrm >> Version 5.002.00

Browsercrm>>Browsercrm >> Version 5.100.00

Referensi

http://osvdb.org/77728
Tags : vdb-entry, x_refsource_OSVDB

http://osvdb.org/77731
Tags : vdb-entry, x_refsource_OSVDB

http://osvdb.org/77729
Tags : vdb-entry, x_refsource_OSVDB

https://exchange.xforce.ibmcloud.com/vulnerabilities/71827
Tags : vdb-entry, x_refsource_XF

http://osvdb.org/77730
Tags : vdb-entry, x_refsource_OSVDB

https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_browser_crm.html
Tags : x_refsource_MISC

http://osvdb.org/77732
Tags : vdb-entry, x_refsource_OSVDB

http://secunia.com/advisories/47217
Tags : third-party-advisory, x_refsource_SECUNIA

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	2.4%	–	–
2022-02-13	–	–	2.4%	–	–
2022-04-03	–	–	2.4%	–	–
2022-07-17	–	–	2.4%	–	–
2022-07-24	–	–	2.4%	–	–
2022-07-31	–	–	2.4%	–	–
2022-10-09	–	–	2.78%	–	–
2022-10-30	–	–	2.78%	–	–
2022-11-20	–	–	2.78%	–	–
2022-11-27	–	–	2.78%	–	–
2023-01-01	–	–	2.78%	–	–
2023-01-15	–	–	3.13%	–	–
2023-02-05	–	–	3.13%	–	–
2023-03-12	–	–	–	0.78%	–
2023-11-19	–	–	–	1.1%	–
2024-02-11	–	–	–	1.1%	–
2024-06-02	–	–	–	1.1%	–
2024-06-30	–	–	–	1.1%	–
2024-09-22	–	–	–	0.86%	–
2024-11-17	–	–	–	1.03%	–
2024-12-08	–	–	–	1.03%	–
2024-12-15	–	–	–	1.03%	–
2024-12-22	–	–	–	3.61%	–
2025-01-19	–	–	–	3.61%	–
2025-03-18	–	–	–	–	6.18%
2025-08-01	–	–	–	–	6.18%
2025-08-04	–	–	–	–	6.18%
2025-12-01	–	–	–	–	6.18%
2025-12-04	–	–	–	–	6.18%
2025-12-24	–	–	–	–	6.18%
2026-01-14	–	–	–	–	4.23%
2026-02-22	–	–	–	–	4.23%
2026-03-08	–	–	–	–	8.08%
2026-03-29	–	–	–	–	6.77%
2026-06-14	–	–	–	–	6.77%

Tanggal	Persentil
2022-02-06	58%
2022-02-13	59%
2022-04-03	8%
2022-07-17	81%
2022-07-24	8%
2022-07-31	81%
2022-10-09	82%
2022-10-30	83%
2022-11-20	82%
2022-11-27	83%
2023-01-01	82%
2023-01-15	83%
2023-02-05	84%
2023-03-12	79%
2023-11-19	83%
2024-02-11	84%
2024-06-02	84%
2024-06-30	85%
2024-09-22	83%
2024-11-17	84%
2024-12-08	84%
2024-12-15	85%
2024-12-22	92%
2025-01-19	92%
2025-03-18	9%
2025-08-01	91%
2025-08-04	9%
2025-12-01	91%
2025-12-04	9%
2025-12-24	91%
2026-01-14	88%
2026-02-22	89%
2026-03-08	92%
2026-03-29	91%
2026-06-14	92%

CVE-2011-5214 : Detail

CVE-2011-5214

Deskripsi CVE

Informasi CVE

Kelemahan Terkait

Metrik

EPSS

Skor EPSS

Persentil EPSS

Informasi eksploitasi

Exploit Database EDB-ID : 36453

Exploit Database EDB-ID : 36451

Exploit Database EDB-ID : 36454

Exploit Database EDB-ID : 36450

Produk yang Disebutkan

Konfigurasi 0

Referensi