Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2011-1168

Опубликовано: 11 апр. 2011
Источник: redhat
CVSS2: 4.3

Описание

Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 4kdelibsNot affected
Red Hat Enterprise Linux 5kdelibsNot affected
Red Hat Enterprise Linux 6kdelibsFixedRHSA-2011:046421.04.2011

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-79
https://bugzilla.redhat.com/show_bug.cgi?id=695398kdelibs: partially universal XSS in Konqueror error pages

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 14 лет назад

Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site.

nvd
больше 14 лет назад

Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site.

debian
больше 14 лет назад

Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError f ...

github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site.

oracle-oval
больше 14 лет назад

ELSA-2011-0464: kdelibs security update (MODERATE)

4.3 Medium

CVSS2