{"id":"CVE-2011-4275","aliases":["EUVD-2011-4217","GHSA-h57m-vxj9-8gpv"],"status":"published","title":"Multiple cross-site scripting (XSS) vulnerabilities in iTop (aka IT Operations Portal) 1.1.181...","description":"Multiple cross-site scripting (XSS) vulnerabilities in iTop (aka IT Operations Portal) 1.1.181 and 1.2.0-RC-282 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted company name, (2) a crafted database server name, (3) a crafted CSV file, (4) a crafted copy-and-paste action, (5) the auth_user parameter in a suggest_pwd action to UI.php, (6) the c[menu] parameter to UniversalSearch.php, (7) the description parameter in a SearchFormToAdd_document_list action to UI.php, (8) the category parameter in an errors action to audit.php, or (9) the suggest_pwd parameter to UI.php.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01491,"percentile":0.74284,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-79"],"published":"2011-11-26T02:00:00Z","modified":"2026-06-16T23:34:41Z","exploits":[{"source":"exploitdb","id":"EDB-10532","title":"Piwik Open Flash Chart - Remote Code Execution","type":"webapps","platform":"php","date":"2009-12-17","url":"https://www.exploit-db.com/exploits/10532"},{"source":"exploitdb","id":"EDB-24492","title":"OpenEMR 4.1.1 - 'ofc_upload_image.php' Arbitrary File Upload","type":"webapps","platform":"php","date":"2013-02-13","verified":true,"url":"https://www.exploit-db.com/exploits/24492"},{"source":"exploitdb","id":"EDB-24529","title":"OpenEMR - Arbitrary '.PHP' File Upload (Metasploit)","type":"remote","platform":"php","date":"2013-02-20","verified":true,"url":"https://www.exploit-db.com/exploits/24529"},{"source":"exploitdb","id":"EDB-24969","title":"Joomla! Component com_civicrm 4.2.2 - Remote Code Injection","type":"webapps","platform":"php","date":"2013-04-22","verified":true,"url":"https://www.exploit-db.com/exploits/24969"},{"source":"exploitdb","id":"EDB-29091","title":"ZonPHP 2.25 - Remote Code Execution","type":"webapps","platform":"php","date":"2013-10-20","verified":true,"url":"https://www.exploit-db.com/exploits/29091"},{"source":"exploitdb","id":"EDB-29210","title":"Open Flash Chart 2 - Arbitrary File Upload (Metasploit)","type":"remote","platform":"php","date":"2013-10-26","verified":true,"url":"https://www.exploit-db.com/exploits/29210"}],"products":[{"vendor":"combodo","product":"itop"}],"references":[{"url":"http://www.securityfocus.com/archive/1/520632","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/archive/1/520632/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.tele-consulting.com/advisories/TC-SA-2011-02.txt","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4275"},{"url":"https://github.com/advisories/GHSA-h57m-vxj9-8gpv"}],"sources":{"cve":[{"id":"CVE-2011-4275","description":"Multiple cross-site scripting (XSS) vulnerabilities in iTop (aka IT Operations Portal) 1.1.181 and 1.2.0-RC-282 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted company name, (2) a crafted database server name, (3) a crafted CSV file, (4) a crafted copy-and-paste action, (5) the auth_user parameter in a suggest_pwd action to UI.php, (6) the c[menu] parameter to UniversalSearch.php, (7) the description parameter in a SearchFormToAdd_document_list action to UI.php, (8) the category parameter in an errors action to audit.php, or (9) the suggest_pwd parameter to UI.php.","status":"published","published":"2011-11-26T02:00:00Z","modified":"2024-08-07T00:01:51.531Z","updated_at":"2026-11-02T14:35:37.989579Z"}],"euvd":[{"id":"EUVD-2011-4217","description":"Multiple cross-site scripting (XSS) vulnerabilities in iTop (aka IT Operations Portal) 1.1.181 and 1.2.0-RC-282 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted company name, (2) a crafted database server name, (3) a crafted CSV file, (4) a crafted copy-and-paste action, (5) the auth_user parameter in a suggest_pwd action to UI.php, (6) the c[menu] parameter to UniversalSearch.php, (7) the description parameter in a SearchFormToAdd_document_list action to UI.php, (8) the category parameter in an errors action to audit.php, or (9) the suggest_pwd parameter to UI.php.","status":"published","published":"2011-11-26T02:00:00Z","modified":"2024-08-07T00:01:51Z","updated_at":"2026-11-03T01:39:49.441333Z"}],"ghsa":[{"id":"GHSA-h57m-vxj9-8gpv","title":"Multiple cross-site scripting (XSS) vulnerabilities in iTop (aka IT Operations Portal) 1.1.181...","description":"Multiple cross-site scripting (XSS) vulnerabilities in iTop (aka IT Operations Portal) 1.1.181 and 1.2.0-RC-282 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted company name, (2) a crafted database server name, (3) a crafted CSV file, (4) a crafted copy-and-paste action, (5) the auth_user parameter in a suggest_pwd action to UI.php, (6) the c[menu] parameter to UniversalSearch.php, (7) the description parameter in a SearchFormToAdd_document_list action to UI.php, (8) the category parameter in an errors action to audit.php, or (9) the suggest_pwd parameter to UI.php.","status":"published","published":"2022-05-14T02:54:51Z","modified":"2023-02-02T05:07:11Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:52:26.890219Z"}],"nvd":[{"id":"CVE-2011-4275","description":"Multiple cross-site scripting (XSS) vulnerabilities in iTop (aka IT Operations Portal) 1.1.181 and 1.2.0-RC-282 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted company name, (2) a crafted database server name, (3) a crafted CSV file, (4) a crafted copy-and-paste action, (5) the auth_user parameter in a suggest_pwd action to UI.php, (6) the c[menu] parameter to UniversalSearch.php, (7) the description parameter in a SearchFormToAdd_document_list action to UI.php, (8) the category parameter in an errors action to audit.php, or (9) the suggest_pwd parameter to UI.php.","status":"published","published":"2011-11-26T03:57:45.693Z","modified":"2026-06-16T23:34:41.243Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:02:10.769216Z"}]}}