CVE-2010-2479

2010-07-0600:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

68.6%

JSON

Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as
used in Mahara and other products, when the browser is Internet Explorer,
allows remote attackers to inject arbitrary web script or HTML via
unspecified vectors.

OSVersionArchitecturePackageVersionFilename
ubuntu9.04noarchmahara< 1.0.9-2ubuntu0.7UNKNOWN
ubuntu9.10noarchmahara< 1.1.5-1ubuntu0.3UNKNOWN
ubuntu10.04noarchmahara< 1.2.4-1ubuntu0.1UNKNOWN
ubuntu10.10noarchmahara< 1.2.5-2UNKNOWN
ubuntu9.10noarchphp-htmlpurifier< 3.3.0-1ubuntu0.1UNKNOWN
ubuntu10.04noarchphp-htmlpurifier< 4.0.0+dfsg1-1ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	9.04	noarch	mahara	< 1.0.9-2ubuntu0.7	UNKNOWN
ubuntu	9.10	noarch	mahara	< 1.1.5-1ubuntu0.3	UNKNOWN
ubuntu	10.04	noarch	mahara	< 1.2.4-1ubuntu0.1	UNKNOWN
ubuntu	10.10	noarch	mahara	< 1.2.5-2	UNKNOWN
ubuntu	9.10	noarch	php-htmlpurifier	< 3.3.0-1ubuntu0.1	UNKNOWN
ubuntu	10.04	noarch	php-htmlpurifier	< 4.0.0+dfsg1-1ubuntu0.1	UNKNOWN