CVEvulnerability
CVE-2011-4616
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-01-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.
Affected configurations
• igor vlasenko html-template-pro (<= 0.9506)
• igor vlasenko html-template-pro 0.01
• igor vlasenko html-template-pro 0.17
• igor vlasenko html-template-pro 0.26
• igor vlasenko html-template-pro 0.34
• igor vlasenko html-template-pro 0.35
• igor vlasenko html-template-pro 0.36
• igor vlasenko html-template-pro 0.37
• igor vlasenko html-template-pro 0.38
• igor vlasenko html-template-pro 0.40
• igor vlasenko html-template-pro 0.41
• igor vlasenko html-template-pro 0.42
• igor vlasenko html-template-pro 0.43
• igor vlasenko html-template-pro 0.44
• igor vlasenko html-template-pro 0.45
• igor vlasenko html-template-pro 0.47
• igor vlasenko html-template-pro 0.48
• igor vlasenko html-template-pro 0.50
• igor vlasenko html-template-pro 0.51
• igor vlasenko html-template-pro 0.52
• igor vlasenko html-template-pro 0.53
• igor vlasenko html-template-pro 0.54
• igor vlasenko html-template-pro 0.55
• igor vlasenko html-template-pro 0.56
• igor vlasenko html-template-pro 0.57
• igor vlasenko html-template-pro 0.58
• igor vlasenko html-template-pro 0.59
• igor vlasenko html-template-pro 0.61
• igor vlasenko html-template-pro 0.62
• igor vlasenko html-template-pro 0.63
• igor vlasenko html-template-pro 0.64
• igor vlasenko html-template-pro 0.65
• igor vlasenko html-template-pro 0.66
• igor vlasenko html-template-pro 0.67
• igor vlasenko html-template-pro 0.68
• igor vlasenko html-template-pro 0.69
• igor vlasenko html-template-pro 0.70
• igor vlasenko html-template-pro 0.71
• igor vlasenko html-template-pro 0.72
• igor vlasenko html-template-pro 0.73
• igor vlasenko html-template-pro 0.74
• igor vlasenko html-template-pro 0.75
• igor vlasenko html-template-pro 0.76
• igor vlasenko html-template-pro 0.77
• igor vlasenko html-template-pro 0.80
• igor vlasenko html-template-pro 0.81
• igor vlasenko html-template-pro 0.82
• igor vlasenko html-template-pro 0.83
• igor vlasenko html-template-pro 0.84
• igor vlasenko html-template-pro 0.85
• igor vlasenko html-template-pro 0.86
• igor vlasenko html-template-pro 0.87
• igor vlasenko html-template-pro 0.90
• igor vlasenko html-template-pro 0.92
• igor vlasenko html-template-pro 0.93
• igor vlasenko html-template-pro 0.94
• igor vlasenko html-template-pro 0.95
• igor vlasenko html-template-pro 0.9501
• igor vlasenko html-template-pro 0.9502
• igor vlasenko html-template-pro 0.9503
… and 2 more
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587 Exploit
- http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes cpansearch.perl.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html lists.fedoraproject.org
- http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507 metacpan.org
- http://openwall.com/lists/oss-security/2011/12/19/1 Exploit
- http://secunia.com/advisories/47184 Vendor Advisory
- http://www.securityfocus.com/bid/51117 www.securityfocus.com
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587 Exploit
- http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes cpansearch.perl.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html lists.fedoraproject.org
- http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507 metacpan.org
- http://openwall.com/lists/oss-security/2011/12/19/1 Exploit
- http://secunia.com/advisories/47184 Vendor Advisory
- http://www.securityfocus.com/bid/51117 www.securityfocus.com