CVE-2010-4607

BAJO 2.6CVE-2010-4607 · Published 29/12/2010 · updated 16/06/2026

En resumen

CVE-2010-4607 es una vulnerabilidad BAJO (CVSS 2.6) que afecta a habari (habariproject).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.6%, mayor que el 75.3% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
habari habariproject	`= 0.6.5`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) additem_form parameter to system/admin/dash_additem.php and the (2) status_data[] parameter to system/admin/dash_status.php. NOTE: some of these details are obtained from third party information.

References

secunia.com/advisories/42688 · Vendor Advisory
wiki.habariproject.org/en/Release_0.6.6
exploit-db.com/exploits/15799 · Exploit
htbridge.ch/advisory/xss_vulnerability_in_habari.html · Exploit
htbridge.ch/advisory/xss_vulnerability_in_habari_1.html · Exploit

Más vulnerabilidades de habari

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free