CVEvulnerability
CVE-2010-1195
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-03-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.
Affected configurations
• ikiwiki ikiwiki 2.0
• ikiwiki ikiwiki 2.1
• ikiwiki ikiwiki 2.2
• ikiwiki ikiwiki 2.3
• ikiwiki ikiwiki 2.4
• ikiwiki ikiwiki 2.5
• ikiwiki ikiwiki 2.10
• ikiwiki ikiwiki 2.11
• ikiwiki ikiwiki 2.12
• ikiwiki ikiwiki 2.13
• ikiwiki ikiwiki 2.14
• ikiwiki ikiwiki 2.15
• ikiwiki ikiwiki 2.16
• ikiwiki ikiwiki 2.17
• ikiwiki ikiwiki 2.18
• ikiwiki ikiwiki 2.19
• ikiwiki ikiwiki 2.20
• ikiwiki ikiwiki 2.30
• ikiwiki ikiwiki 2.31
• ikiwiki ikiwiki 2.31.1
• ikiwiki ikiwiki 2.31.2
• ikiwiki ikiwiki 2.31.3
• ikiwiki ikiwiki 2.40
• ikiwiki ikiwiki 2.41
• ikiwiki ikiwiki 2.42
• ikiwiki ikiwiki 2.43
• ikiwiki ikiwiki 2.44
• ikiwiki ikiwiki 2.45
• ikiwiki ikiwiki 2.46
• ikiwiki ikiwiki 2.47
• ikiwiki ikiwiki 2.48
• ikiwiki ikiwiki 2.49
• ikiwiki ikiwiki 2.50
• ikiwiki ikiwiki 2.51
• ikiwiki ikiwiki 2.52
• ikiwiki ikiwiki 2.53
• ikiwiki ikiwiki 3.00
• ikiwiki ikiwiki 3.01
• ikiwiki ikiwiki 3.02
• ikiwiki ikiwiki 3.03
• ikiwiki ikiwiki 3.04
• ikiwiki ikiwiki 3.05
• ikiwiki ikiwiki 3.06
• ikiwiki ikiwiki 3.07
• ikiwiki ikiwiki 3.08
• ikiwiki ikiwiki 3.09
• ikiwiki ikiwiki 3.10
• ikiwiki ikiwiki 3.11
• ikiwiki ikiwiki 3.12
• ikiwiki ikiwiki 3.13
• ikiwiki ikiwiki 3.14
• ikiwiki ikiwiki 3.141
• ikiwiki ikiwiki 3.1415
• ikiwiki ikiwiki 3.14159
• ikiwiki ikiwiki 3.141592
• ikiwiki ikiwiki 3.1415926
• ikiwiki ikiwiki 3.14159265
• ikiwiki ikiwiki 3.20091009
• ikiwiki ikiwiki 3.20091017
• ikiwiki ikiwiki 3.20091022
… and 9 more
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://ikiwiki.info/security/#index36h2 Vendor Advisory
- http://secunia.com/advisories/38983 Vendor Advisory
- http://secunia.com/advisories/39048 Vendor Advisory
- http://www.debian.org/security/2010/dsa-2020 www.debian.org
- http://www.vupen.com/english/advisories/2010/0662 Vendor Advisory
- http://ikiwiki.info/security/#index36h2 Vendor Advisory
- http://secunia.com/advisories/38983 Vendor Advisory
- http://secunia.com/advisories/39048 Vendor Advisory
- http://www.debian.org/security/2010/dsa-2020 www.debian.org
- http://www.vupen.com/english/advisories/2010/0662 Vendor Advisory