4.3
CVSSv2

CVE-2011-5040

Published: 30/12/2011 Updated: 29/08/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote malicious users to inject arbitrary web script or HTML via the config parameter to (1) nalozi_naslov.php and (2) widget.dokumenti_lista.php.

Vulnerable Product Search on Vulmon Subscribe to Product

infoproject biznis heroj

Exploits

Infoproject Biznis Heroj (loginphp) Authentication Bypass Vulnerability Vendor: Infoproject DOO Product web page: wwwbiznisherojmk Affected version: Plus, Pro and Extra Summary: Biznis Heroj or Business Hero (Áèçíèñ Õåðî¼) is the first software on the Macedonian market that will help you manage your business processes in you ...