Lucene search
HistoryDec 29, 2010 - 10:33 p.m.
CVE-2010-4616
cve-2010-4616
xss
vulnerability
impresscms
web script injection
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.5%
Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearch_ContentContent parameter.
Affected configurations
Node
impresscmsimpresscmsRange≤1.2.3final
ORimpresscmsimpresscmsMatch1.0beta1
ORimpresscmsimpresscmsMatch1.0beta2
ORimpresscmsimpresscmsMatch1.0final
ORimpresscmsimpresscmsMatch1.0rc1
ORimpresscmsimpresscmsMatch1.0rc2
ORimpresscmsimpresscmsMatch1.0rc3
ORimpresscmsimpresscmsMatch1.1alpha1
ORimpresscmsimpresscmsMatch1.1alpha2
ORimpresscmsimpresscmsMatch1.1beta1
ORimpresscmsimpresscmsMatch1.1final
ORimpresscmsimpresscmsMatch1.1rc1
ORimpresscmsimpresscmsMatch1.1rc2
ORimpresscmsimpresscmsMatch1.1rc3
ORimpresscmsimpresscmsMatch1.1.1final
ORimpresscmsimpresscmsMatch1.1.1rc1
ORimpresscmsimpresscmsMatch1.1.1rc2
ORimpresscmsimpresscmsMatch1.1.2final
ORimpresscmsimpresscmsMatch1.1.2rc1
ORimpresscmsimpresscmsMatch1.1.2rc2
ORimpresscmsimpresscmsMatch1.1.3beta
ORimpresscmsimpresscmsMatch1.1.3final
ORimpresscmsimpresscmsMatch1.1.3rc1
ORimpresscmsimpresscmsMatch1.2alpha1
ORimpresscmsimpresscmsMatch1.2alpha2
ORimpresscmsimpresscmsMatch1.2beta
ORimpresscmsimpresscmsMatch1.2final
ORimpresscmsimpresscmsMatch1.2rc1
ORimpresscmsimpresscmsMatch1.2rc2
ORimpresscmsimpresscmsMatch1.2.1beta
ORimpresscmsimpresscmsMatch1.2.1final
ORimpresscmsimpresscmsMatch1.2.1rc1
ORimpresscmsimpresscmsMatch1.2.3beta
ORimpresscmsimpresscmsMatch1.2.3rc1
ORimpresscmsimpresscmsMatch1.2.3rc2
Related
cvelist
cvelist
CVE-2010-4616
2010-12-29 19:00:00
github
github
osv
osv
htbridge
htbridge
Cross-site Scripting (XSS) Vulnerability in ImpressCMS
2010-12-07 00:00:00
prion
prion
Cross site scripting
2010-12-29 22:33:00
nvd
nvd
CVE-2010-4616
2010-12-29 22:33:32
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.5%
Related for CVE-2010-4616