CVE-2010-4524

EUVD-2010-4492
Cross-site scripting (XSS) vulnerability in lib/mhtxthtml.pl in MHonArc 2.6.16 allows remote attackers to inject arbitrary web script or HTML via a malformed start tag and end tag for a SCRIPT element, as demonstrated by <scr<body>ipt> and </scr<body>ipt> sequences.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 78%
Affected Products (NVD)
VendorProductVersion
mhonarcmhonarc
2.6.16
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
mhonarc
bookworm
2.6.19-2.2
fixed
bullseye
2.6.19-2.1
fixed
sid
2.6.19-2.3
fixed
squeeze
no-dsa
trixie
2.6.19-2.3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mhonarc
dapper
ignored
hardy
ignored
karmic
ignored
lucid
ignored
maverick
ignored
natty
ignored
oneiric
ignored
precise
not-affected
quantal
ignored
raring
ignored
saucy
ignored
trusty
dne
Common Weakness Enumeration
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607693
http://lists.mandriva.com/security-announce/2011-01/msg00004.php
http://openwall.com/lists/oss-security/2010/12/21/4
http://openwall.com/lists/oss-security/2010/12/21/7
http://openwall.com/lists/oss-security/2010/12/22/4
http://openwall.com/lists/oss-security/2010/12/22/5
http://savannah.nongnu.org/bugs/?32013
http://secunia.com/advisories/42694
http://www.mail-archive.com/mhonarc-dev%40mhonarc.org/msg01296.html
http://www.securityfocus.com/bid/45528
http://www.vupen.com/english/advisories/2010/3344
http://www.vupen.com/english/advisories/2011/0067
https://bugzilla.redhat.com/show_bug.cgi?id=664718
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607693
http://lists.mandriva.com/security-announce/2011-01/msg00004.php
http://openwall.com/lists/oss-security/2010/12/21/4
http://openwall.com/lists/oss-security/2010/12/21/7
http://openwall.com/lists/oss-security/2010/12/22/4
http://openwall.com/lists/oss-security/2010/12/22/5
http://savannah.nongnu.org/bugs/?32013
http://secunia.com/advisories/42694
http://www.mail-archive.com/mhonarc-dev%40mhonarc.org/msg01296.html
http://www.securityfocus.com/bid/45528
http://www.vupen.com/english/advisories/2010/3344
http://www.vupen.com/english/advisories/2011/0067
https://bugzilla.redhat.com/show_bug.cgi?id=664718