CVE-2010-4616
29.12.2010, 22:33
Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearch_ContentContent parameter.
| Vendor | Product | Version |
|---|---|---|
| impresscms | impresscms | 𝑥 ≤ 1.2.3 |
| impresscms | impresscms | 1.0:beta1 |
| impresscms | impresscms | 1.0:beta2 |
| impresscms | impresscms | 1.0:final |
| impresscms | impresscms | 1.0:rc1 |
| impresscms | impresscms | 1.0:rc2 |
| impresscms | impresscms | 1.0:rc3 |
| impresscms | impresscms | 1.1:alpha1 |
| impresscms | impresscms | 1.1:alpha2 |
| impresscms | impresscms | 1.1:beta1 |
| impresscms | impresscms | 1.1:final |
| impresscms | impresscms | 1.1:rc1 |
| impresscms | impresscms | 1.1:rc2 |
| impresscms | impresscms | 1.1:rc3 |
| impresscms | impresscms | 1.1.1:final |
| impresscms | impresscms | 1.1.1:rc1 |
| impresscms | impresscms | 1.1.1:rc2 |
| impresscms | impresscms | 1.1.2:final |
| impresscms | impresscms | 1.1.2:rc1 |
| impresscms | impresscms | 1.1.2:rc2 |
| impresscms | impresscms | 1.1.3:beta |
| impresscms | impresscms | 1.1.3:final |
| impresscms | impresscms | 1.1.3:rc1 |
| impresscms | impresscms | 1.2:alpha1 |
| impresscms | impresscms | 1.2:alpha2 |
| impresscms | impresscms | 1.2:beta |
| impresscms | impresscms | 1.2:final |
| impresscms | impresscms | 1.2:rc1 |
| impresscms | impresscms | 1.2:rc2 |
| impresscms | impresscms | 1.2.1:beta |
| impresscms | impresscms | 1.2.1:final |
| impresscms | impresscms | 1.2.1:rc1 |
| impresscms | impresscms | 1.2.3:beta |
| impresscms | impresscms | 1.2.3:rc1 |
| impresscms | impresscms | 1.2.3:rc2 |
𝑥
= Vulnerable software versions
References