« Volver al listado

CVE-2010-4949

Estado: ModificadaMedia (4.3)—

Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure component before 1.2.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML by entering it in an unspecified window.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Evnix — FreichatEvnix — Freichatpure

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-4949",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-10-09T10:55:37.223",
  "references": [
    {
      "url": "http://forum.joomla.org/viewtopic.php?p=2209586",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/40751",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/66628",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/41961",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/60828",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://forum.joomla.org/viewtopic.php?p=2209586",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/40751",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/66628",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/41961",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/60828",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure component before 1.2.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML by entering it in an unspecified window."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el (1) componente FreiChat anterior a v2.1.2 para Joomla! y en el (2) componente FreiChatPure anterior v1.2.2 para Joomla!, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de una ventana desconocida."
    }
  ],
  "lastModified": "2026-06-16T23:25:51.107",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:evnix:freichat:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82970690-9313-45AF-9987-B55B39E99740",
              "versionEndIncluding": "2.1.1"
            },
            {
              "criteria": "cpe:2.3:a:evnix:freichat:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "64420C2A-6EAA-4A93-8924-054B0C3489BD"
            },
            {
              "criteria": "cpe:2.3:a:evnix:freichat:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0BE7883F-25A4-4BFD-A510-4FFB6D6E6F5C"
            },
            {
              "criteria": "cpe:2.3:a:evnix:freichat:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E29738B-3F8C-4EE7-89D7-79A884DB0443"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:evnix:freichatpure:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8775AB7A-9EE3-4860-B872-07656A34CC20",
              "versionEndIncluding": "1.2.1"
            },
            {
              "criteria": "cpe:2.3:a:evnix:freichatpure:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "943957EF-7AE2-41B2-9D53-3A661616BC20"
            },
            {
              "criteria": "cpe:2.3:a:evnix:freichatpure:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84932BCA-7437-44CE-B7C5-DF66388BFE8C"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}