mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 17:21:36 +00:00
248 lines
9.4 KiB
JSON
248 lines
9.4 KiB
JSON
{
|
|
"id": "CVE-2010-3294",
|
|
"sourceIdentifier": "secalert@redhat.com",
|
|
"published": "2010-09-24T19:00:04.933",
|
|
"lastModified": "2023-02-13T04:22:59.330",
|
|
"vulnStatus": "Modified",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en apc.php de la extensi\u00f3n \"Alternative PHP Cache\" (APC) en versiones anteriores a la v3.1.4 para PHP permite a usuarios remotos inyectar codigo de script web o c\u00f3digo HTML de su elecci\u00f3n a trav\u00e9s de vectores de ataque sin especificar."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "MEDIUM",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "NONE",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "NONE",
|
|
"baseScore": 4.3
|
|
},
|
|
"baseSeverity": "MEDIUM",
|
|
"exploitabilityScore": 8.6,
|
|
"impactScore": 2.9,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-79"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:*:p1:*:*:*:*:*:*",
|
|
"versionEndIncluding": "3.1.3",
|
|
"matchCriteriaId": "898279E0-1F9A-4D45-9902-6D9C2153B30E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2912FEC9-E71E-431C-ACA7-27C0A8E6B107"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "6FEC80D4-0550-4C59-9392-6EF1361C0D7E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9C8AB12D-D0BB-4628-9F6F-B716C1ACC3A7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "22F8AFE5-A612-4250-BB99-88F108835BD9"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "89BE7CB7-EC2C-419F-82B9-3D1ADEBF6DC0"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "EDEFF307-0EE8-49A8-B10F-EEC1DC2FEF4F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "ABA1C3CB-7B1A-4BF3-9791-F699D5B33CBD"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "99F9F5F7-957E-49B1-A58E-B4BC2B02B755"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D1360E41-F961-4915-83EB-9D3E41FB26F9"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5ECA9D41-000B-4F3E-BAF4-6D42DAB39731"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E7544B6B-D153-4937-8FE6-C06246642917"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.7:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "EA23F233-C2D0-43B3-AA15-D459BE760C04"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.8:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8A1A28E4-655D-483E-BCEE-2423290850A3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.9:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B41719E9-1268-49B1-837C-0AFDD151A7A8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.10:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A8B9EEB5-472F-44BA-BEE7-07E1BDE2FCD8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.11:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1C918A8A-DC10-4ECC-852E-3738A89F874C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D615703C-94A1-41D1-BB09-C76195A29A46"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:p1:*:*:*:*:*:*",
|
|
"matchCriteriaId": "638C2836-35FE-49AF-ABF7-1936742AB021"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:p2:*:*:*:*:*:*",
|
|
"matchCriteriaId": "088936F3-F52F-4C35-83E3-A8D4847703A8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.13:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "86A81C28-309E-44CE-9221-3B1CB84DD981"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.14:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A496D93C-375A-4B06-BC5B-0AB9B41BB6BE"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.15:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B3318828-8848-4B4E-8FCD-A12A6EC3E733"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.16:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "48DE97C6-4950-4337-9913-03A8C7D70E46"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.17:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "95FAD318-61E4-4E63-8452-9BC1648F1743"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.18:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B582BF89-C915-4C00-B3D2-88F349D64EEB"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.19:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "687D64D6-600F-4143-B80F-38FF9584E323"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.1.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "0839C225-9FE1-4016-805F-90AFC8EA4E26"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.1.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B97851F4-0B94-48CE-A65E-AA23581D6C94"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.1.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "257F7098-16E9-494F-AD14-DFC97FF17389"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://pecl.php.net/package-changelog.php?package=APC&release=3.1.4",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "http://rhn.redhat.com/errata/RHSA-2012-0811.html",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "http://www.openwall.com/lists/oss-security/2010/09/14/1",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "http://www.openwall.com/lists/oss-security/2010/09/14/6",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "http://www.openwall.com/lists/oss-security/2010/09/14/8",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "http://www.vupen.com/english/advisories/2010/2406",
|
|
"source": "secalert@redhat.com",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
}
|
|
]
|
|
} |