CVE-2010-3070

MOYENNE 4.3CVE-2010-3070 · Published 28/09/2010 · updated 16/06/2026

En bref

CVE-2010-3070 est une vulnérabilité MOYENNE (CVSS 4.3) touchant nusoap (dietrich ayala).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 6.2%, plus élevée que 93.5% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
nusoap dietrich_ayala	`= 0.9.5`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to an arbitrary PHP script that uses NuSOAP classes.

References

bugs.debian.org/cgi-bin/bugreport.cgi
git.debian.org
git.debian.org
git.mantisbt.org
lists.fedoraproject.org/pipermail/package-announce/2010-September/048317.html
lists.fedoraproject.org/pipermail/package-announce/2010-September/048325.html
lists.fedoraproject.org/pipermail/package-announce/2010-September/048548.html
lists.fedoraproject.org/pipermail/package-announce/2010-September/048639.html
lists.fedoraproject.org/pipermail/package-announce/2010-September/048659.html
secunia.com/advisories/41653
sourceforge.net/mailarchive/message.php
sourceforge.net/projects/nusoap/forums/forum/193579/topic/3834005
mantisbt.org/bugs/changelog_page.php
mantisbt.org/bugs/view.php
openwall.com/lists/oss-security/2010/09/03/2
openwall.com/lists/oss-security/2010/09/07/4
openwall.com/lists/oss-security/2010/09/14/12
openwall.com/lists/oss-security/2010/09/14/13
securityfocus.com/bid/42959
vupen.com/english/advisories/2010/2535
bugzilla.redhat.com/show_bug.cgi
bugzilla.redhat.com/show_bug.cgi

Autres vulnérabilités de nusoap

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free