Lucene search
K

30 matches found

OSV
OSV
added 2015/10/31 4:59 a.m.4 views

UBUNTU-CVE-2015-5667

Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

2.6CVSS5.9AI score0.02092EPSS
Exploits0References5
OSV
OSV
added 2015/10/31 4:59 a.m.1 views

DEBIAN-CVE-2015-5667

Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

2.6CVSS5.6AI score0.02092EPSS
Exploits0References1
OSV
OSV
added 2015/10/31 4:59 a.m.10 views

CVE-2015-5667

Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

5.4AI score
Exploits0References6
Debian CVE
Debian CVE
added 2015/10/31 1:0 a.m.25 views

CVE-2015-5667

Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

2.6CVSS5.4AI score0.02092EPSS
Exploits0
CVE
CVE
added 2015/10/31 1:0 a.m.70 views

CVE-2015-5667

The HTML-Scrubber Perl module is affected by CVE-2015-5667 (pre-0.15) with XSS via crafted comments when the comment feature is enabled. Connected advisories confirm vendor/ distro fixes (e.g., Mageia and Debian) applying updates to perl-HTML-Scrubber to mitigate the vulnerability. The exact root...

2.6CVSS5.4AI score0.02092EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2015/10/31 1:0 a.m.17 views

CVE-2015-5667

Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

5.3AI score0.02092EPSS
Exploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/10/30 6:16 a.m.1 views

HTML::Scrubber vulnerable to cross-site scripting

Overview HTML::Scrubber is a Perl module for scrubbing/sanitizing html. HTML::Scrubber contains a cross-site scripting vulnerability CWE-79. Toshiharu Sugiyama and Ryo Murakami of DeNA Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Securit...

2.6CVSS6AI score0.02092EPSS
Exploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/10/30 12:0 a.m.30 views

JVN#53973084: HTML::Scrubber vulnerable to cross-site scripting

HTML::Scrubber is a Perl module for scrubbing/sanitizing html. HTML::Scrubber contains a cross-site scripting vulnerability CWE-79. Impact If the function "comment" is enabled, an arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version...

2.6CVSS5.5AI score0.02092EPSS
Exploits0
FreeBSD
FreeBSD
added 2015/10/10 12:0 a.m.31 views

p5-HTML-Scrubber -- XSS vulnerability

MITRE reports: Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

2.6CVSS5.6AI score0.02092EPSS
Exploits0References3
Cvelist
Cvelist
added 2008/02/19 12:0 a.m.18 views

CVE-2008-0809

Cross-site scripting XSS vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script or HTML via title contents...

5.5AI score0.01083EPSS
Exploits0References5
Rows per page
Query Builder