4.3

CVE-2010-1195

Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ikiwiki ≫ Ikiwiki Version 2.0
Ikiwiki ≫ Ikiwiki Version 2.1
Ikiwiki ≫ Ikiwiki Version 2.2
Ikiwiki ≫ Ikiwiki Version 2.3
Ikiwiki ≫ Ikiwiki Version 2.4
Ikiwiki ≫ Ikiwiki Version 2.5
Ikiwiki ≫ Ikiwiki Version 2.10
Ikiwiki ≫ Ikiwiki Version 2.11
Ikiwiki ≫ Ikiwiki Version 2.12
Ikiwiki ≫ Ikiwiki Version 2.13
Ikiwiki ≫ Ikiwiki Version 2.14
Ikiwiki ≫ Ikiwiki Version 2.15
Ikiwiki ≫ Ikiwiki Version 2.16
Ikiwiki ≫ Ikiwiki Version 2.17
Ikiwiki ≫ Ikiwiki Version 2.18
Ikiwiki ≫ Ikiwiki Version 2.19
Ikiwiki ≫ Ikiwiki Version 2.20
Ikiwiki ≫ Ikiwiki Version 2.30
Ikiwiki ≫ Ikiwiki Version 2.31
Ikiwiki ≫ Ikiwiki Version 2.31.1
Ikiwiki ≫ Ikiwiki Version 2.31.2
Ikiwiki ≫ Ikiwiki Version 2.31.3
Ikiwiki ≫ Ikiwiki Version 2.40
Ikiwiki ≫ Ikiwiki Version 2.41
Ikiwiki ≫ Ikiwiki Version 2.42
Ikiwiki ≫ Ikiwiki Version 2.43
Ikiwiki ≫ Ikiwiki Version 2.44
Ikiwiki ≫ Ikiwiki Version 2.45
Ikiwiki ≫ Ikiwiki Version 2.46
Ikiwiki ≫ Ikiwiki Version 2.47
Ikiwiki ≫ Ikiwiki Version 2.48
Ikiwiki ≫ Ikiwiki Version 2.49
Ikiwiki ≫ Ikiwiki Version 2.50
Ikiwiki ≫ Ikiwiki Version 2.51
Ikiwiki ≫ Ikiwiki Version 2.52
Ikiwiki ≫ Ikiwiki Version 2.53
Ikiwiki ≫ Ikiwiki Version 3.00
Ikiwiki ≫ Ikiwiki Version 3.01
Ikiwiki ≫ Ikiwiki Version 3.02
Ikiwiki ≫ Ikiwiki Version 3.03
Ikiwiki ≫ Ikiwiki Version 3.04
Ikiwiki ≫ Ikiwiki Version 3.05
Ikiwiki ≫ Ikiwiki Version 3.06
Ikiwiki ≫ Ikiwiki Version 3.07
Ikiwiki ≫ Ikiwiki Version 3.08
Ikiwiki ≫ Ikiwiki Version 3.09
Ikiwiki ≫ Ikiwiki Version 3.10
Ikiwiki ≫ Ikiwiki Version 3.11
Ikiwiki ≫ Ikiwiki Version 3.12
Ikiwiki ≫ Ikiwiki Version 3.13
Ikiwiki ≫ Ikiwiki Version 3.14
Ikiwiki ≫ Ikiwiki Version 3.141
Ikiwiki ≫ Ikiwiki Version 3.1415
Ikiwiki ≫ Ikiwiki Version 3.14159
Ikiwiki ≫ Ikiwiki Version 3.141592
Ikiwiki ≫ Ikiwiki Version 3.1415926
Ikiwiki ≫ Ikiwiki Version 3.14159265
Ikiwiki ≫ Ikiwiki Version 3.20091009
Ikiwiki ≫ Ikiwiki Version 3.20091017
Ikiwiki ≫ Ikiwiki Version 3.20091022
Ikiwiki ≫ Ikiwiki Version 3.20091023
Ikiwiki ≫ Ikiwiki Version 3.20091031
Ikiwiki ≫ Ikiwiki Version 3.20091113
Ikiwiki ≫ Ikiwiki Version 3.20091202
Ikiwiki ≫ Ikiwiki Version 3.20091218
Ikiwiki ≫ Ikiwiki Version 3.20100102.3
Ikiwiki ≫ Ikiwiki Version 3.20100122
Ikiwiki ≫ Ikiwiki Version 3.20100212
Ikiwiki ≫ Ikiwiki Version 3.20100302
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.71% 0.744
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://ikiwiki.info/security/#index36h2
Vendor Advisory
http://secunia.com/advisories/38983
Vendor Advisory
http://secunia.com/advisories/39048
Vendor Advisory
http://www.debian.org/security/2010/dsa-2020
http://www.vupen.com/english/advisories/2010/0662
Vendor Advisory