René Helmke 7791f18b51 bootstrap
2023-05-16 16:09:41 +02:00

248 lines
9.4 KiB
JSON

{
"id": "CVE-2010-3294",
"sourceIdentifier": "secalert@redhat.com",
"published": "2010-09-24T19:00:04.933",
"lastModified": "2023-02-13T04:22:59.330",
"vulnStatus": "Modified",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
},
{
"lang": "es",
"value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en apc.php de la extensi\u00f3n \"Alternative PHP Cache\" (APC) en versiones anteriores a la v3.1.4 para PHP permite a usuarios remotos inyectar codigo de script web o c\u00f3digo HTML de su elecci\u00f3n a trav\u00e9s de vectores de ataque sin especificar."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "MEDIUM",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 4.3
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:*:p1:*:*:*:*:*:*",
"versionEndIncluding": "3.1.3",
"matchCriteriaId": "898279E0-1F9A-4D45-9902-6D9C2153B30E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2912FEC9-E71E-431C-ACA7-27C0A8E6B107"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "6FEC80D4-0550-4C59-9392-6EF1361C0D7E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "9C8AB12D-D0BB-4628-9F6F-B716C1ACC3A7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "22F8AFE5-A612-4250-BB99-88F108835BD9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "89BE7CB7-EC2C-419F-82B9-3D1ADEBF6DC0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "EDEFF307-0EE8-49A8-B10F-EEC1DC2FEF4F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "ABA1C3CB-7B1A-4BF3-9791-F699D5B33CBD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "99F9F5F7-957E-49B1-A58E-B4BC2B02B755"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "D1360E41-F961-4915-83EB-9D3E41FB26F9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "5ECA9D41-000B-4F3E-BAF4-6D42DAB39731"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "E7544B6B-D153-4937-8FE6-C06246642917"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.7:*:*:*:*:*:*:*",
"matchCriteriaId": "EA23F233-C2D0-43B3-AA15-D459BE760C04"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.8:*:*:*:*:*:*:*",
"matchCriteriaId": "8A1A28E4-655D-483E-BCEE-2423290850A3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.9:*:*:*:*:*:*:*",
"matchCriteriaId": "B41719E9-1268-49B1-837C-0AFDD151A7A8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.10:*:*:*:*:*:*:*",
"matchCriteriaId": "A8B9EEB5-472F-44BA-BEE7-07E1BDE2FCD8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.11:*:*:*:*:*:*:*",
"matchCriteriaId": "1C918A8A-DC10-4ECC-852E-3738A89F874C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:*:*:*:*:*:*:*",
"matchCriteriaId": "D615703C-94A1-41D1-BB09-C76195A29A46"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:p1:*:*:*:*:*:*",
"matchCriteriaId": "638C2836-35FE-49AF-ABF7-1936742AB021"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:p2:*:*:*:*:*:*",
"matchCriteriaId": "088936F3-F52F-4C35-83E3-A8D4847703A8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.13:*:*:*:*:*:*:*",
"matchCriteriaId": "86A81C28-309E-44CE-9221-3B1CB84DD981"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.14:*:*:*:*:*:*:*",
"matchCriteriaId": "A496D93C-375A-4B06-BC5B-0AB9B41BB6BE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.15:*:*:*:*:*:*:*",
"matchCriteriaId": "B3318828-8848-4B4E-8FCD-A12A6EC3E733"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.16:*:*:*:*:*:*:*",
"matchCriteriaId": "48DE97C6-4950-4337-9913-03A8C7D70E46"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.17:*:*:*:*:*:*:*",
"matchCriteriaId": "95FAD318-61E4-4E63-8452-9BC1648F1743"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.18:*:*:*:*:*:*:*",
"matchCriteriaId": "B582BF89-C915-4C00-B3D2-88F349D64EEB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.19:*:*:*:*:*:*:*",
"matchCriteriaId": "687D64D6-600F-4143-B80F-38FF9584E323"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0839C225-9FE1-4016-805F-90AFC8EA4E26"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B97851F4-0B94-48CE-A65E-AA23581D6C94"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "257F7098-16E9-494F-AD14-DFC97FF17389"
}
]
}
]
}
],
"references": [
{
"url": "http://pecl.php.net/package-changelog.php?package=APC&release=3.1.4",
"source": "secalert@redhat.com"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2012-0811.html",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2010/09/14/1",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2010/09/14/6",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2010/09/14/8",
"source": "secalert@redhat.com"
},
{
"url": "http://www.vupen.com/english/advisories/2010/2406",
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
]
}
]
}