cbcvebase.
CVE-2011-3426
published 2011-10-14

CVE-2011-3426: Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file…

PriorityP418medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.82%
76.6th percentile
Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file accompanied by a "Content-Disposition: attachment" HTTP header.

Affected

19 ranges
VendorProductVersion rangeFixed in
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.