VYPR
Unrated severityNVD Advisory· Published Apr 18, 2011· Updated Apr 29, 2026

CVE-2011-1168

CVE-2011-1168

Description

Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site.

Affected products

23
  • KDE/Kde Sc23 versions
    cpe:2.3:a:kde:kde_sc:4.4.0:*:*:*:*:*:*:*+ 22 more
    • cpe:2.3:a:kde:kde_sc:4.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.4.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.4.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.4.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.4.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.4.0:rc3:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.4.4:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.5.5:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.6:beta1:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.6:beta2:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.6:rc1:*:*:*:*:*:*
    • cpe:2.3:a:kde:kde_sc:4.6:rc2:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

18

News mentions

0

No linked articles in our index yet.