Lucene search
HistoryOct 03, 2022 - 4:20 p.m.
CVE-2010-1195
cve-2010-1195
xss
htmlscrubber
ikiwiki
vulnerability
nvd
5.5 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
61.2%
Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.
Affected configurations
Node
ikiwikiikiwikiMatch2.0
ORikiwikiikiwikiMatch2.1
ORikiwikiikiwikiMatch2.2
ORikiwikiikiwikiMatch2.3
ORikiwikiikiwikiMatch2.4
ORikiwikiikiwikiMatch2.5
ORikiwikiikiwikiMatch2.10
ORikiwikiikiwikiMatch2.11
ORikiwikiikiwikiMatch2.12
ORikiwikiikiwikiMatch2.13
ORikiwikiikiwikiMatch2.14
ORikiwikiikiwikiMatch2.15
ORikiwikiikiwikiMatch2.16
ORikiwikiikiwikiMatch2.17
ORikiwikiikiwikiMatch2.18
ORikiwikiikiwikiMatch2.19
ORikiwikiikiwikiMatch2.20
ORikiwikiikiwikiMatch2.30
ORikiwikiikiwikiMatch2.31
ORikiwikiikiwikiMatch2.31.1
ORikiwikiikiwikiMatch2.31.2
ORikiwikiikiwikiMatch2.31.3
ORikiwikiikiwikiMatch2.40
ORikiwikiikiwikiMatch2.41
ORikiwikiikiwikiMatch2.42
ORikiwikiikiwikiMatch2.43
ORikiwikiikiwikiMatch2.44
ORikiwikiikiwikiMatch2.45
ORikiwikiikiwikiMatch2.46
ORikiwikiikiwikiMatch2.47
ORikiwikiikiwikiMatch2.48
ORikiwikiikiwikiMatch2.49
ORikiwikiikiwikiMatch2.50
ORikiwikiikiwikiMatch2.51
ORikiwikiikiwikiMatch2.52
ORikiwikiikiwikiMatch2.53
ORikiwikiikiwikiMatch3.00
ORikiwikiikiwikiMatch3.01
ORikiwikiikiwikiMatch3.02
ORikiwikiikiwikiMatch3.03
ORikiwikiikiwikiMatch3.04
ORikiwikiikiwikiMatch3.05
ORikiwikiikiwikiMatch3.06
ORikiwikiikiwikiMatch3.07
ORikiwikiikiwikiMatch3.08
ORikiwikiikiwikiMatch3.09
ORikiwikiikiwikiMatch3.10
ORikiwikiikiwikiMatch3.11
ORikiwikiikiwikiMatch3.12
ORikiwikiikiwikiMatch3.13
ORikiwikiikiwikiMatch3.14
ORikiwikiikiwikiMatch3.141
ORikiwikiikiwikiMatch3.1415
ORikiwikiikiwikiMatch3.14159
ORikiwikiikiwikiMatch3.141592
ORikiwikiikiwikiMatch3.1415926
ORikiwikiikiwikiMatch3.14159265
ORikiwikiikiwikiMatch3.20091009
ORikiwikiikiwikiMatch3.20091017
ORikiwikiikiwikiMatch3.20091022
ORikiwikiikiwikiMatch3.20091023
ORikiwikiikiwikiMatch3.20091031
ORikiwikiikiwikiMatch3.20091113
ORikiwikiikiwikiMatch3.20091202
ORikiwikiikiwikiMatch3.20091218
ORikiwikiikiwikiMatch3.20100102.3
ORikiwikiikiwikiMatch3.20100122
ORikiwikiikiwikiMatch3.20100212
ORikiwikiikiwikiMatch3.20100302
Related
prion
prion
Cross site scripting
2010-03-31 18:00:00
nessus
nessus
Debian DSA-2020-1 : ikiwiki - insufficient input sanitization
2010-03-23 00:00:00
osv
osv
ikiwiki - cross-site scripting
2010-03-20 00:00:00
cvelist
cvelist
CVE-2010-1195
2022-10-03 16:20:58
ubuntucve
ubuntucve
CVE-2010-1195
2010-03-31 00:00:00
nvd
nvd
CVE-2010-1195
2010-03-31 18:00:00
openvas
openvas
Debian: Security Advisory (DSA-2020-1)
2010-03-30 00:00:00
Ikiwiki 'htmlscrubber' Cross Site Scripting Vulnerability
2010-04-06 00:00:00
Debian Security Advisory DSA 2020-1 (ikiwiki)
2010-03-30 00:00:00
debiancve
debiancve
CVE-2010-1195
2022-10-03 16:20:58
5.5 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
61.2%
Related for CVE-2010-1195