CVEvulnerability

CVE-2010-1273

9.3 HIGH Published 2010-04-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-04-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of (1) form values and (2) JSignal arguments, which has unspecified impact and remote attack vectors.

Affected configurations

• emweb wt (<= 3.1.0) • emweb wt 1.1.4 • emweb wt 1.1.5 • emweb wt 1.1.6 • emweb wt 1.1.7 • emweb wt 2.0.0 • emweb wt 2.0.1 • emweb wt 2.0.4 • emweb wt 2.0.4a • emweb wt 2.0.5 • emweb wt 2.1.0 • emweb wt 2.1.1 • emweb wt 2.1.2 • emweb wt 2.1.3 • emweb wt 2.1.4 • emweb wt 2.1.5 • emweb wt 2.2.0 • emweb wt 2.2.1 • emweb wt 2.2.2 • emweb wt 2.2.3 • emweb wt 2.99.0 • emweb wt 2.99.1 • emweb wt 2.99.2 • emweb wt 2.99.3 • emweb wt 2.99.4 • emweb wt 2.99.5 • emweb wt 3.0.0

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References