CVE-2010-2228

Опубликовано: 28 июн. 2010

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors involving extended characters in a username.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия до 1.8.12 (включая)

cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.3.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.4.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.4.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.5.0:beta:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.5.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.5.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.5.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.8:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.7.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.7.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.7.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.7.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.7.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.7.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.9:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.10:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.11:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.8:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.0061

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2010-2228

ubuntu

почти 15 лет назад

CVE-2010-2228

debian

почти 15 лет назад

Cross-site scripting (XSS) vulnerability in the MNET access-control in ...

GHSA-7556-5jcq-72q2

github

около 3 лет назад

EPSS

Процентиль: 69%

0.0061

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79