CVE-2011-4616
Estado: ModificadaMedia (4.3)—
Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
- Puntuación base: 4.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.62%
- Percentil entre todas las CVEs puntuadas: 75
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-79
Referencias
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587
- http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html
- http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507
- http://openwall.com/lists/oss-security/2011/12/19/1
- http://secunia.com/advisories/47184
- http://www.securityfocus.com/bid/51117
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587
- http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html
- http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507
- http://openwall.com/lists/oss-security/2011/12/19/1
- http://secunia.com/advisories/47184
- http://www.securityfocus.com/bid/51117
JSON original (NVD)
Mostrar
{
"id": "CVE-2011-4616",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-01-06T04:01:26.453",
"references": [
{
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587",
"tags": [
"Exploit"
],
"source": "secalert@redhat.com"
},
{
"url": "http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes",
"source": "secalert@redhat.com"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html",
"source": "secalert@redhat.com"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html",
"source": "secalert@redhat.com"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html",
"source": "secalert@redhat.com"
},
{
"url": "http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507",
"source": "secalert@redhat.com"
},
{
"url": "http://openwall.com/lists/oss-security/2011/12/19/1",
"tags": [
"Exploit"
],
"source": "secalert@redhat.com"
},
{
"url": "http://secunia.com/advisories/47184",
"tags": [
"Vendor Advisory"
],
"source": "secalert@redhat.com"
},
{
"url": "http://www.securityfocus.com/bid/51117",
"source": "secalert@redhat.com"
},
{
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://openwall.com/lists/oss-security/2011/12/19/1",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/47184",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/51117",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters."
},
{
"lang": "es",
"value": "Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en el módulo HTML-Template-Pro para Perl antes de v0.9507 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros de plantilla, en relación con el manejo inadecuado de los caracteres > (mayor que) y < (menor que)."
}
],
"lastModified": "2026-06-16T23:35:09.043",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81B1E7F0-FE0B-4D92-B40E-3E872CA5C42E",
"versionEndIncluding": "0.9506"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1CD158E-274C-420D-898B-F9CC70C8CA41"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA820865-D87E-4CD3-8F83-FE90D64A57BD"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1833C0A5-DC98-4E1D-8CA9-A3EFB5915F07"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FEA1D7B9-DDF3-482A-AC1F-2876E4D736CB"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01093EFF-B2E4-4F1E-B96D-F450483AD024"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.36:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E6E1EB7-0248-4EA0-AA93-8A1A602AA774"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.37:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65ED0DB5-F2E7-4AD1-8BB3-EBD0EA4F7AA5"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.38:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6745E05-ACD3-4314-BF62-FD727FA85173"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.40:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BD73986-314A-4843-A330-83BEC354BEFE"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.41:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "685F1623-7C91-4B8B-A09F-793BD09AD69B"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.42:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30A1B1EF-FB21-455D-B579-3007F271ED8D"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.43:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8203EEF8-2B0D-41C3-BE95-49EF1585A79E"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.44:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E40E636C-77F4-4921-A9B9-27698A7DCA2E"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.45:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "450C79FF-67E6-4AB7-84BE-B565DA4A3176"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.47:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7FD0D6FD-1696-40EC-9F55-EE1B3F92373A"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.48:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BDD26AF-2661-42AE-B2A5-75C8D76E731C"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.50:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E20E2D3F-E5AE-4041-AB40-243A75626FD1"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.51:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1032632-2A79-4525-AD54-289AE7F253B9"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.52:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D0ECBC7-CF35-4657-8BFB-79CCF62C7691"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.53:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDE2C32D-52D4-4DBE-838F-E9CEE7FA8CF6"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.54:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FA4702C-7DB0-4948-9082-91790DE859DE"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.55:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0ADDC952-3B10-428A-82B5-D10AFE5F97B7"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.56:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F5E8035-C5F9-495D-AF39-694C3EAD5008"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.57:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8E54C1F-DBBF-40CA-A4B2-4EB16B60928D"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.58:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "666479C5-E7F9-4117-BBB4-7ADE9874EE69"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.59:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFDBC525-C06F-402F-8E04-30AC1F1C5741"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.61:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "474DA826-37E9-4B53-81F0-CAC36C03AAED"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.62:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78C7144C-C310-46D2-97DD-B8D5E2201A0F"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.63:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FB8F70F-08DC-43D6-AF72-0E4AC07EBAA6"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.64:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A3BC438-61B5-434A-8461-842C024AF06D"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.65:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7989F339-467D-47BA-9E05-3741A60ADC46"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.66:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CC51B72-EAB3-404A-952F-85657336213C"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.67:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56FAD6BB-B165-4B27-A5E4-BEA09F414278"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.68:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "809FA422-C5E7-4107-A2BA-E2A388166F2F"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.69:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DE45E38-EE33-4B81-BF17-4338029FFDA8"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.70:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C69E447-8F8C-464B-9DE7-F785AA70ABC1"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.71:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F262C32F-9740-40B6-9A9B-16C1F1D1A065"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.72:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9966C9A-A674-4B9D-8285-A1CACE90F0E3"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.73:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AEAAE04-F3A4-4CEF-9AF2-0CD3A47F0F13"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.74:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DD97525-FEC1-43C9-A056-6BDE8EC975AB"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.75:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "159E9B66-47CF-4848-93B1-B5C43869934B"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.76:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F246C1D-D0E7-42EC-8109-514B17240788"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.77:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9785D98-5DB4-4585-A3BB-666B01A19163"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.80:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5619C91B-6205-4172-BEF1-349E0F332256"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.81:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "142F26B5-5CB1-49BB-A469-7922B6C75D3E"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.82:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89D67852-8115-4C22-983C-C036DC2EAB04"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.83:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0FB16FF-26CC-43C4-9BFD-7728758016D5"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.84:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1886C07-3519-4E83-928D-7FE1BBDC93F2"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.85:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2A63A02-7D30-47C6-B095-DE437D50A9BD"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.86:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16A618A5-54F2-4E36-B10B-3200D6BAFCDA"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.87:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1AE3D87-7B0D-4EBE-9528-C8791537657F"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.90:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96EF9ACF-04EE-48AC-BDC2-4521C5A15805"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.92:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2855786-1E0A-4E6C-8949-E0BEF11E64F3"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.93:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "439B1BB3-6CDB-481A-A9D0-4385302C65E5"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.94:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "743B82BB-C027-4438-A153-BAB63007B0AF"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.95:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B97E94C2-9E56-4095-9B19-7708706B5900"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.9501:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F17ABA4-AE7F-473C-9113-C7A9A5FD4AC7"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.9502:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78C69AD8-6B9C-44AB-9217-08864BF7C92D"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.9503:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B606904-F051-46A7-BDD5-389E9AA62EB5"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.9504:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFAAC825-832C-49EF-933E-D6E4870D0BE6"
},
{
"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.9505:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3AD5EE4-5D44-48C2-AA73-CCFD7E317328"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secalert@redhat.com"
}