CVE-2011-1952

common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML markup, as demonstrated by an a< sequence.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 72%
VendorProductVersion
postrevpost_revolution
𝑥
≤ 0.8.0c
postrevpost_revolution
0.6.2:beta
postrevpost_revolution
0.6.3:beta
postrevpost_revolution
0.6.4
postrevpost_revolution
0.6.5
postrevpost_revolution
0.6.6
postrevpost_revolution
0.7.0:rc1
postrevpost_revolution
0.7.0:rc2
postrevpost_revolution
0.7.0:rc3
postrevpost_revolution
0.7.0:rc4
postrevpost_revolution
0.8.0:alpha
postrevpost_revolution
0.8.0b:b
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://javierb.com.ar/2011/06/01/postrev-vunls/
http://postrev.com.ar/verpost.php?id_noticia=59
http://securityreason.com/securityalert/8270
http://www.securityfocus.com/archive/1/518205/100/0/threaded
http://www.securityfocus.com/bid/47967
http://javierb.com.ar/2011/06/01/postrev-vunls/
http://postrev.com.ar/verpost.php?id_noticia=59
http://securityreason.com/securityalert/8270
http://www.securityfocus.com/archive/1/518205/100/0/threaded
http://www.securityfocus.com/bid/47967