Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-10510

Опубликовано: 31 авг. 2017
Источник: debian

Описание

Cross-site scripting (XSS) vulnerability in the Security component of Kohana before 3.3.6 allows remote attackers to inject arbitrary web script or HTML by bypassing the strip_image_tags protection mechanism in system/classes/Kohana/Security.php.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libkohana2-phpremovedpackage
libkohana2-phpignoredjessiepackage

Примечания

  • https://github.com/kohana/kohana/issues/107

  • Fixed by https://github.com/kohana/core/pull/697

Связанные уязвимости

ubuntu логотип

CVE-2016-10510

CVSS3: 6.1
ubuntu
больше 8 лет назад

Cross-site scripting (XSS) vulnerability in the Security component of Kohana before 3.3.6 allows remote attackers to inject arbitrary web script or HTML by bypassing the strip_image_tags protection mechanism in system/classes/Kohana/Security.php.

nvd логотип

CVE-2016-10510

CVSS3: 6.1
nvd
больше 8 лет назад

Cross-site scripting (XSS) vulnerability in the Security component of Kohana before 3.3.6 allows remote attackers to inject arbitrary web script or HTML by bypassing the strip_image_tags protection mechanism in system/classes/Kohana/Security.php.

github логотип

GHSA-jpf9-3cq3-2phg

CVSS3: 6.1
github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in the Security component of Kohana before 3.3.6 allows remote attackers to inject arbitrary web script or HTML by bypassing the strip_image_tags protection mechanism in system/classes/Kohana/Security.php.