CVE-2010-4616

Опубликовано: 29 дек. 2010

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearch_ContentContent parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:impresscms:impresscms:*:final:*:*:*:*:*:*

Версия до 1.2.3 (включая)

cpe:2.3:a:impresscms:impresscms:1.0:beta1:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.0:beta2:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.0:final:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.0:rc1:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.0:rc2:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.0:rc3:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1:alpha1:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1:alpha2:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1:beta1:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1:final:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1:rc1:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1:rc2:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1:rc3:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1.1:final:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1.1:rc1:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1.1:rc2:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1.2:final:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1.2:rc1:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1.2:rc2:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1.3:beta:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1.3:final:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.1.3:rc1:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.2:alpha1:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.2:alpha2:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.2:beta:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.2:final:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.2:rc1:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.2:rc2:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.2.1:beta:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.2.1:final:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.2.1:rc1:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.2.3:beta:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.2.3:rc1:*:*:*:*:*:*

cpe:2.3:a:impresscms:impresscms:1.2.3:rc2:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00285

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-39vm-rvwh-q86j

github

больше 3 лет назад

ImpressCMS Cross-site Scripting vulnerability via quicksearch_ContentContent parameter