CVE-2010-1448
Published Jun 24, 2010
Last updated 7 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9.8 allows remote attackers to inject arbitrary web script or HTML via vectors related to a string in the search page's TITLE element, a different vulnerability than CVE-2009-4497 and CVE-2010-1625.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2E26257-AC05-45D4-8634-003F22641CFB",
"versionEndIncluding": "0.9.7"
},
{
"criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "615A0E3B-5931-4B51-87AA-BFF399BE3762"
},
{
"criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE2ECB28-6473-4D73-8AC8-CF8732BD0428"
},
{
"criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B4BA9B7-0D11-4910-8D8D-AF42A8886DC3"
},
{
"criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB08278A-4ACA-4C1B-889D-D1AAB90D3A46"
},
{
"criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "527C1006-423D-4BF8-A454-BADEC3D37D0E"
},
{
"criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A75D32B-5F56-435F-A670-F14143D8359D"
},
{
"criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B19DB649-5F29-4723-8871-3942ADAE0C40"
},
{
"criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1357B088-5884-413F-91FE-DE91D3D7AC6B"
},
{
"criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0122AB54-946D-4F45-96C2-53A79E93B82B"
},
{
"criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AAB75A8-E13E-4C2D-BCD1-FA5BF389793D"
},
{
"criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35986B09-E9CB-45AC-8A77-615749BBF6E4"
}
],
"operator": "OR"
}
]
}
]