What’s Vulnerable › Vulnerabilities

CVE-2011-5220

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2012-10-25 · updated 2026-06-16
• Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in templates/default/Admin/Login.html in PHP-SCMS 1.6.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter to index.php.

Affected products

• Cristopher Shi Php-Scms: through 1.6.8; 1.6.7

References

• http://osvdb.org/77692
• http://secunia.com/advisories/46766
• http://www.rul3z.de/advisories/SSCHADV2011-035.txt
• http://www.securityfocus.com/bid/51062
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71829
• http://osvdb.org/77692
• http://secunia.com/advisories/46766
• http://www.rul3z.de/advisories/SSCHADV2011-035.txt
• http://www.securityfocus.com/bid/51062
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71829

Get alerted when CVE-2011-5220 or the next vulnerability affects your stack