CVE-2010-1448
24.06.2010, 12:30
Cross-site scripting (XSS) vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9.8 allows remote attackers to inject arbitrary web script or HTML via vectors related to a string in the search page's TITLE element, a different vulnerability than CVE-2009-4497 and CVE-2010-1625.
| Vendor | Product | Version |
|---|---|---|
| malcom_box | lxr_cross_referencer | 𝑥 ≤ 0.9.7 |
| malcom_box | lxr_cross_referencer | 0.3 |
| malcom_box | lxr_cross_referencer | 0.3.1 |
| malcom_box | lxr_cross_referencer | 0.7 |
| malcom_box | lxr_cross_referencer | 0.8 |
| malcom_box | lxr_cross_referencer | 0.9 |
| malcom_box | lxr_cross_referencer | 0.9.1 |
| malcom_box | lxr_cross_referencer | 0.9.2 |
| malcom_box | lxr_cross_referencer | 0.9.3 |
| malcom_box | lxr_cross_referencer | 0.9.4 |
| malcom_box | lxr_cross_referencer | 0.9.5 |
| malcom_box | lxr_cross_referencer | 0.9.6 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References