XSS in Backuppc

CVE-2011-3361

Cross-site scripting (XSS) vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to index.cgi.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.025 (83.1th percentile) — read the EPSS interpretation.

Affected products

  • Backuppc — versions 3.2.0
  • N/a — versions n/a

Weakness classification (CWE)

References