CVE-2010-4524
EPSS 1.2%發布日:2011/1/3修改日:2026/4/28
描述
Cross-site scripting (XSS) vulnerability in lib/mhtxthtml.pl in MHonArc 2.6.16 allows remote attackers to inject arbitrary web script or HTML via a malformed start tag and end tag for a SCRIPT element, as demonstrated by <scr<body>ipt> and </scr<body>ipt> sequences.
受影響套件(1)
- Debian/mhonarcfrom 0, < 2.6.18-1