4.3

CVE-2010-2536

Exploit

Multiple cross-site scripting (XSS) vulnerabilities in rekonq 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) a URL associated with a nonexistent domain name, related to webpage.cpp, aka a "universal XSS" issue; (2) unspecified vectors related to webview.cpp; and the about: views for (3) favorites, (4) bookmarks, (5) closed tabs, and (6) history.

Data is provided by the National Vulnerability Database (NVD)
Adjam ≫ Rekonq Version <= 0.5.0
Adjam ≫ Rekonq Version0.0.1
Adjam ≫ Rekonq Version0.0.2
Adjam ≫ Rekonq Version0.0.3
Adjam ≫ Rekonq Version0.0.4
Adjam ≫ Rekonq Version0.1 Updatealpha
Adjam ≫ Rekonq Version0.1.0
Adjam ≫ Rekonq Version0.1.95
Adjam ≫ Rekonq Version0.1.98
Adjam ≫ Rekonq Version0.2.0
Adjam ≫ Rekonq Version0.2.90
Adjam ≫ Rekonq Version0.3.0
Adjam ≫ Rekonq Version0.3.90
Adjam ≫ Rekonq Version0.4.0
Adjam ≫ Rekonq Version0.4.90
Adjam ≫ Rekonq Version0.4.95
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.41% 0.582
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.