CVEvulnerability
CVE-2010-2479
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-07-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• htmlpurifier htmlpurifier (<= 4.1.0)
• htmlpurifier htmlpurifier 1.0.0
• htmlpurifier htmlpurifier 1.0.1
• htmlpurifier htmlpurifier 1.1.0
• htmlpurifier htmlpurifier 1.1.1
• htmlpurifier htmlpurifier 1.1.2
• htmlpurifier htmlpurifier 1.2.0
• htmlpurifier htmlpurifier 1.3.0
• htmlpurifier htmlpurifier 1.3.1
• htmlpurifier htmlpurifier 1.3.2
• htmlpurifier htmlpurifier 1.4.0
• htmlpurifier htmlpurifier 1.4.1
• htmlpurifier htmlpurifier 1.5.0
• htmlpurifier htmlpurifier 1.6.0
• htmlpurifier htmlpurifier 1.6.1
• htmlpurifier htmlpurifier 2.0.0
• htmlpurifier htmlpurifier 2.0.1
• htmlpurifier htmlpurifier 2.1.0
• htmlpurifier htmlpurifier 2.1.1
• htmlpurifier htmlpurifier 2.1.2
• htmlpurifier htmlpurifier 2.1.3
• htmlpurifier htmlpurifier 2.1.4
• htmlpurifier htmlpurifier 2.1.5
• htmlpurifier htmlpurifier 3.0.0
• htmlpurifier htmlpurifier 3.1.0
• htmlpurifier htmlpurifier 3.1.1
• htmlpurifier htmlpurifier 3.2.0
• htmlpurifier htmlpurifier 3.3.0
• htmlpurifier htmlpurifier 4.0.0
• mahara mahara (<= 1.0.14)
• mahara mahara 0.9.0
• mahara mahara 0.9.1
• mahara mahara 0.9.2
• mahara mahara 1.0.0
• mahara mahara 1.0.1
• mahara mahara 1.0.2
• mahara mahara 1.0.3
• mahara mahara 1.0.4
• mahara mahara 1.0.5
• mahara mahara 1.0.6
• mahara mahara 1.0.7
• mahara mahara 1.0.8
• mahara mahara 1.0.9
• mahara mahara 1.0.10
• mahara mahara 1.0.11
• mahara mahara 1.0.12
• mahara mahara 1.0.13
• mahara mahara 1.1.0
• mahara mahara 1.1.1
• mahara mahara 1.1.2
• mahara mahara 1.1.3
• mahara mahara 1.1.4
• mahara mahara 1.1.5
• mahara mahara 1.1.6
• mahara mahara 1.1.7
• mahara mahara 1.1.8
• mahara mahara 1.2.0
• mahara mahara 1.2.1
• mahara mahara 1.2.2
• mahara mahara 1.2.3
… and 1 more
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://htmlpurifier.org/news/2010/0531-4.1.1-released Patch
- http://repo.or.cz/w/htmlpurifier.git/commitdiff/18e538317a877a0509ae71a860429c41770da230 repo.or.cz
- http://secunia.com/advisories/39613 Vendor Advisory
- http://secunia.com/advisories/40431 Vendor Advisory
- http://wiki.mahara.org/Release_Notes/1.0.15 wiki.mahara.org
- http://wiki.mahara.org/Release_Notes/1.1.9 wiki.mahara.org
- http://wiki.mahara.org/Release_Notes/1.2.5 wiki.mahara.org
- http://www.securityfocus.com/bid/41259 Patch
- http://htmlpurifier.org/news/2010/0531-4.1.1-released Patch
- http://repo.or.cz/w/htmlpurifier.git/commitdiff/18e538317a877a0509ae71a860429c41770da230 repo.or.cz
- http://secunia.com/advisories/39613 Vendor Advisory
- http://secunia.com/advisories/40431 Vendor Advisory
- http://wiki.mahara.org/Release_Notes/1.0.15 wiki.mahara.org
- http://wiki.mahara.org/Release_Notes/1.1.9 wiki.mahara.org
- http://wiki.mahara.org/Release_Notes/1.2.5 wiki.mahara.org
- http://www.securityfocus.com/bid/41259 Patch