« Volver al listado

CVE-2010-1625

Estado: ModificadaMedia (4.3)—

Cross-site scripting (XSS) vulnerability in LXR Cross Referencer before 0.9.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the search body and the results page for a search, a different vulnerability than CVE-2009-4497 and CVE-2010-1448.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Malcom BOX — LXR Cross Referencer

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-1625",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-06-24T12:30:01.767",
  "references": [
    {
      "url": "http://marc.info/?l=oss-security&m=127289957223005&w=2",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://marc.info/?l=oss-security&m=127316953819027&w=2",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://sourceforge.net/projects/lxr/files/stable/lxr-0.9.7/ChangeLog/download",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2010/05/03/7",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2010/05/06/2",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2010/05/14/3",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://marc.info/?l=oss-security&m=127289957223005&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=oss-security&m=127316953819027&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sourceforge.net/projects/lxr/files/stable/lxr-0.9.7/ChangeLog/download",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2010/05/03/7",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2010/05/06/2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2010/05/14/3",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in LXR Cross Referencer before 0.9.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the search body and the results page for a search, a different vulnerability than CVE-2009-4497 and CVE-2010-1448."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en LXR Cross Referencer anterior v0.9.7 permite a atacantes remotos inyecatr código web o HTML de su elección a través de vectores relacionados con el cuerpo ode búsqueda y la página de resultado para una busqueda, una vulnerabilidad diferente que than CVE-2009-4497 y CVE-2010-1448."
    }
  ],
  "lastModified": "2026-06-16T23:18:44.243",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B8CA1B98-8DCB-4AEB-8834-C8B0A4395F64",
              "versionEndIncluding": "0.9.6"
            },
            {
              "criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "615A0E3B-5931-4B51-87AA-BFF399BE3762"
            },
            {
              "criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EE2ECB28-6473-4D73-8AC8-CF8732BD0428"
            },
            {
              "criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B4BA9B7-0D11-4910-8D8D-AF42A8886DC3"
            },
            {
              "criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB08278A-4ACA-4C1B-889D-D1AAB90D3A46"
            },
            {
              "criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "527C1006-423D-4BF8-A454-BADEC3D37D0E"
            },
            {
              "criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A75D32B-5F56-435F-A670-F14143D8359D"
            },
            {
              "criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B19DB649-5F29-4723-8871-3942ADAE0C40"
            },
            {
              "criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1357B088-5884-413F-91FE-DE91D3D7AC6B"
            },
            {
              "criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0122AB54-946D-4F45-96C2-53A79E93B82B"
            },
            {
              "criteria": "cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4AAB75A8-E13E-4C2D-BCD1-FA5BF389793D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}