4.3

CVE-2010-1195

Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ikiwiki ≫ Ikiwiki Version2.0
Ikiwiki ≫ Ikiwiki Version2.1
Ikiwiki ≫ Ikiwiki Version2.2
Ikiwiki ≫ Ikiwiki Version2.3
Ikiwiki ≫ Ikiwiki Version2.4
Ikiwiki ≫ Ikiwiki Version2.5
Ikiwiki ≫ Ikiwiki Version2.10
Ikiwiki ≫ Ikiwiki Version2.11
Ikiwiki ≫ Ikiwiki Version2.12
Ikiwiki ≫ Ikiwiki Version2.13
Ikiwiki ≫ Ikiwiki Version2.14
Ikiwiki ≫ Ikiwiki Version2.15
Ikiwiki ≫ Ikiwiki Version2.16
Ikiwiki ≫ Ikiwiki Version2.17
Ikiwiki ≫ Ikiwiki Version2.18
Ikiwiki ≫ Ikiwiki Version2.19
Ikiwiki ≫ Ikiwiki Version2.20
Ikiwiki ≫ Ikiwiki Version2.30
Ikiwiki ≫ Ikiwiki Version2.31
Ikiwiki ≫ Ikiwiki Version2.31.1
Ikiwiki ≫ Ikiwiki Version2.31.2
Ikiwiki ≫ Ikiwiki Version2.31.3
Ikiwiki ≫ Ikiwiki Version2.40
Ikiwiki ≫ Ikiwiki Version2.41
Ikiwiki ≫ Ikiwiki Version2.42
Ikiwiki ≫ Ikiwiki Version2.43
Ikiwiki ≫ Ikiwiki Version2.44
Ikiwiki ≫ Ikiwiki Version2.45
Ikiwiki ≫ Ikiwiki Version2.46
Ikiwiki ≫ Ikiwiki Version2.47
Ikiwiki ≫ Ikiwiki Version2.48
Ikiwiki ≫ Ikiwiki Version2.49
Ikiwiki ≫ Ikiwiki Version2.50
Ikiwiki ≫ Ikiwiki Version2.51
Ikiwiki ≫ Ikiwiki Version2.52
Ikiwiki ≫ Ikiwiki Version2.53
Ikiwiki ≫ Ikiwiki Version3.00
Ikiwiki ≫ Ikiwiki Version3.01
Ikiwiki ≫ Ikiwiki Version3.02
Ikiwiki ≫ Ikiwiki Version3.03
Ikiwiki ≫ Ikiwiki Version3.04
Ikiwiki ≫ Ikiwiki Version3.05
Ikiwiki ≫ Ikiwiki Version3.06
Ikiwiki ≫ Ikiwiki Version3.07
Ikiwiki ≫ Ikiwiki Version3.08
Ikiwiki ≫ Ikiwiki Version3.09
Ikiwiki ≫ Ikiwiki Version3.10
Ikiwiki ≫ Ikiwiki Version3.11
Ikiwiki ≫ Ikiwiki Version3.12
Ikiwiki ≫ Ikiwiki Version3.13
Ikiwiki ≫ Ikiwiki Version3.14
Ikiwiki ≫ Ikiwiki Version3.141
Ikiwiki ≫ Ikiwiki Version3.1415
Ikiwiki ≫ Ikiwiki Version3.14159
Ikiwiki ≫ Ikiwiki Version3.141592
Ikiwiki ≫ Ikiwiki Version3.1415926
Ikiwiki ≫ Ikiwiki Version3.14159265
Ikiwiki ≫ Ikiwiki Version3.20091009
Ikiwiki ≫ Ikiwiki Version3.20091017
Ikiwiki ≫ Ikiwiki Version3.20091022
Ikiwiki ≫ Ikiwiki Version3.20091023
Ikiwiki ≫ Ikiwiki Version3.20091031
Ikiwiki ≫ Ikiwiki Version3.20091113
Ikiwiki ≫ Ikiwiki Version3.20091202
Ikiwiki ≫ Ikiwiki Version3.20091218
Ikiwiki ≫ Ikiwiki Version3.20100102.3
Ikiwiki ≫ Ikiwiki Version3.20100122
Ikiwiki ≫ Ikiwiki Version3.20100212
Ikiwiki ≫ Ikiwiki Version3.20100302
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.71% 0.744
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://ikiwiki.info/security/#index36h2
Vendor Advisory
http://secunia.com/advisories/38983
Vendor Advisory
http://secunia.com/advisories/39048
Vendor Advisory
http://www.debian.org/security/2010/dsa-2020
http://www.vupen.com/english/advisories/2010/0662
Vendor Advisory