PT-2011-1587 · Mhonarc · Mhonarc

Jan Lieskovsky

·

Published

2011-01-03

·

Updated

2023-02-13

·

CVE-2010-4524

CVSS v2.0

4.3

Medium

VectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions MHonArc version 2.6.16
Description The issue is related to a cross-site scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary web script or HTML via a malformed start tag and end tag for a SCRIPT element. This can be achieved with sequences such as <scr<body>ipt> and </scr<body>ipt>.
Recommendations For MHonArc version 2.6.16, consider updating to a newer version that addresses this issue, as no specific fix is provided for this version. As a temporary workaround, restrict the use of the lib/mhtxthtml.pl script to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2010-4524

Affected Products

Mhonarc