CVE-2010-3294

{"id": "CVE-2010-3294", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-09-24T19:00:04.933", "references": [{"url": "http://pecl.php.net/package-changelog.php?package=APC&release=3.1.4", "source": "secalert@redhat.com"}, {"url": "http://rhn.redhat.com/errata/RHSA-2012-0811.html", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2010/09/14/1", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2010/09/14/6", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2010/09/14/8", "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2010/2406", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://pecl.php.net/package-changelog.php?package=APC&release=3.1.4", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://rhn.redhat.com/errata/RHSA-2012-0811.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2010/09/14/1", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2010/09/14/6", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2010/09/14/8", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2010/2406", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en apc.php de la extensi\u00f3n \"Alternative PHP Cache\" (APC) en versiones anteriores a la v3.1.4 para PHP permite a usuarios remotos inyectar codigo de script web o c\u00f3digo HTML de su elecci\u00f3n a trav\u00e9s de vectores de ataque sin especificar."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:*:p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "898279E0-1F9A-4D45-9902-6D9C2153B30E", "versionEndIncluding": "3.1.3"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2912FEC9-E71E-431C-ACA7-27C0A8E6B107"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FEC80D4-0550-4C59-9392-6EF1361C0D7E"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C8AB12D-D0BB-4628-9F6F-B716C1ACC3A7"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22F8AFE5-A612-4250-BB99-88F108835BD9"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "89BE7CB7-EC2C-419F-82B9-3D1ADEBF6DC0"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDEFF307-0EE8-49A8-B10F-EEC1DC2FEF4F"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ABA1C3CB-7B1A-4BF3-9791-F699D5B33CBD"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99F9F5F7-957E-49B1-A58E-B4BC2B02B755"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1360E41-F961-4915-83EB-9D3E41FB26F9"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5ECA9D41-000B-4F3E-BAF4-6D42DAB39731"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7544B6B-D153-4937-8FE6-C06246642917"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA23F233-C2D0-43B3-AA15-D459BE760C04"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A1A28E4-655D-483E-BCEE-2423290850A3"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B41719E9-1268-49B1-837C-0AFDD151A7A8"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8B9EEB5-472F-44BA-BEE7-07E1BDE2FCD8"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C918A8A-DC10-4ECC-852E-3738A89F874C"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D615703C-94A1-41D1-BB09-C76195A29A46"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "638C2836-35FE-49AF-ABF7-1936742AB021"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:p2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "088936F3-F52F-4C35-83E3-A8D4847703A8"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86A81C28-309E-44CE-9221-3B1CB84DD981"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A496D93C-375A-4B06-BC5B-0AB9B41BB6BE"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3318828-8848-4B4E-8FCD-A12A6EC3E733"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48DE97C6-4950-4337-9913-03A8C7D70E46"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "95FAD318-61E4-4E63-8452-9BC1648F1743"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B582BF89-C915-4C00-B3D2-88F349D64EEB"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "687D64D6-600F-4143-B80F-38FF9584E323"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0839C225-9FE1-4016-805F-90AFC8EA4E26"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B97851F4-0B94-48CE-A65E-AA23581D6C94"}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "257F7098-16E9-494F-AD14-DFC97FF17389"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}