CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-1448

Cross-site scripting (XSS) vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9.8 allows remote attackers to inject arbitrary web script or HTML via vectors related to a string in the search page's TITLE element, a different vulnerability than CVE-2009-4497 and CVE-2010-1625.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 67.4%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2010-1448

Malcom Box » Lxr Cross Referencer » Version: Any

cpe:2.3:a:malcom_box:lxr_cross_referencer:*
Malcom Box » Lxr Cross Referencer » Version: 0.3

cpe:2.3:a:malcom_box:lxr_cross_referencer:0.3
Malcom Box » Lxr Cross Referencer » Version: 0.3.1

cpe:2.3:a:malcom_box:lxr_cross_referencer:0.3.1
Malcom Box » Lxr Cross Referencer » Version: 0.7

cpe:2.3:a:malcom_box:lxr_cross_referencer:0.7
Malcom Box » Lxr Cross Referencer » Version: 0.8

cpe:2.3:a:malcom_box:lxr_cross_referencer:0.8
Malcom Box » Lxr Cross Referencer » Version: 0.9

cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9
Malcom Box » Lxr Cross Referencer » Version: 0.9.1

cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.1
Malcom Box » Lxr Cross Referencer » Version: 0.9.2

cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.2
Malcom Box » Lxr Cross Referencer » Version: 0.9.3

cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.3
Malcom Box » Lxr Cross Referencer » Version: 0.9.4

cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.4
Malcom Box » Lxr Cross Referencer » Version: 0.9.5

cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.5
Malcom Box » Lxr Cross Referencer » Version: 0.9.6

cpe:2.3:a:malcom_box:lxr_cross_referencer:0.9.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-1448

Products

Pricing

Contact Us