{ "id": "CVE-2010-3294", "sourceIdentifier": "secalert@redhat.com", "published": "2010-09-24T19:00:04.933", "lastModified": "2023-02-13T04:22:59.330", "vulnStatus": "Modified", "descriptions": [ { "lang": "en", "value": "Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." }, { "lang": "es", "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en apc.php de la extensi\u00f3n \"Alternative PHP Cache\" (APC) en versiones anteriores a la v3.1.4 para PHP permite a usuarios remotos inyectar codigo de script web o c\u00f3digo HTML de su elecci\u00f3n a trav\u00e9s de vectores de ataque sin especificar." } ], "metrics": { "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector": "NETWORK", "accessComplexity": "MEDIUM", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "availabilityImpact": "NONE", "baseScore": 4.3 }, "baseSeverity": "MEDIUM", "exploitabilityScore": 8.6, "impactScore": 2.9, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-79" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:*:p1:*:*:*:*:*:*", "versionEndIncluding": "3.1.3", "matchCriteriaId": "898279E0-1F9A-4D45-9902-6D9C2153B30E" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "2912FEC9-E71E-431C-ACA7-27C0A8E6B107" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "6FEC80D4-0550-4C59-9392-6EF1361C0D7E" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "9C8AB12D-D0BB-4628-9F6F-B716C1ACC3A7" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "22F8AFE5-A612-4250-BB99-88F108835BD9" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "89BE7CB7-EC2C-419F-82B9-3D1ADEBF6DC0" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "EDEFF307-0EE8-49A8-B10F-EEC1DC2FEF4F" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "ABA1C3CB-7B1A-4BF3-9791-F699D5B33CBD" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "99F9F5F7-957E-49B1-A58E-B4BC2B02B755" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "D1360E41-F961-4915-83EB-9D3E41FB26F9" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "5ECA9D41-000B-4F3E-BAF4-6D42DAB39731" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "E7544B6B-D153-4937-8FE6-C06246642917" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "EA23F233-C2D0-43B3-AA15-D459BE760C04" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "8A1A28E4-655D-483E-BCEE-2423290850A3" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "B41719E9-1268-49B1-837C-0AFDD151A7A8" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.10:*:*:*:*:*:*:*", "matchCriteriaId": "A8B9EEB5-472F-44BA-BEE7-07E1BDE2FCD8" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.11:*:*:*:*:*:*:*", "matchCriteriaId": "1C918A8A-DC10-4ECC-852E-3738A89F874C" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:*:*:*:*:*:*:*", "matchCriteriaId": "D615703C-94A1-41D1-BB09-C76195A29A46" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:p1:*:*:*:*:*:*", "matchCriteriaId": "638C2836-35FE-49AF-ABF7-1936742AB021" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:p2:*:*:*:*:*:*", "matchCriteriaId": "088936F3-F52F-4C35-83E3-A8D4847703A8" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.13:*:*:*:*:*:*:*", "matchCriteriaId": "86A81C28-309E-44CE-9221-3B1CB84DD981" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "A496D93C-375A-4B06-BC5B-0AB9B41BB6BE" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.15:*:*:*:*:*:*:*", "matchCriteriaId": "B3318828-8848-4B4E-8FCD-A12A6EC3E733" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.16:*:*:*:*:*:*:*", "matchCriteriaId": "48DE97C6-4950-4337-9913-03A8C7D70E46" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.17:*:*:*:*:*:*:*", "matchCriteriaId": "95FAD318-61E4-4E63-8452-9BC1648F1743" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.18:*:*:*:*:*:*:*", "matchCriteriaId": "B582BF89-C915-4C00-B3D2-88F349D64EEB" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.19:*:*:*:*:*:*:*", "matchCriteriaId": "687D64D6-600F-4143-B80F-38FF9584E323" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "0839C225-9FE1-4016-805F-90AFC8EA4E26" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "B97851F4-0B94-48CE-A65E-AA23581D6C94" }, { "vulnerable": true, "criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "257F7098-16E9-494F-AD14-DFC97FF17389" } ] } ] } ], "references": [ { "url": "http://pecl.php.net/package-changelog.php?package=APC&release=3.1.4", "source": "secalert@redhat.com" }, { "url": "http://rhn.redhat.com/errata/RHSA-2012-0811.html", "source": "secalert@redhat.com" }, { "url": "http://www.openwall.com/lists/oss-security/2010/09/14/1", "source": "secalert@redhat.com" }, { "url": "http://www.openwall.com/lists/oss-security/2010/09/14/6", "source": "secalert@redhat.com" }, { "url": "http://www.openwall.com/lists/oss-security/2010/09/14/8", "source": "secalert@redhat.com" }, { "url": "http://www.vupen.com/english/advisories/2010/2406", "source": "secalert@redhat.com", "tags": [ "Vendor Advisory" ] } ] }