CVE-2011-4616

{"id": "CVE-2011-4616", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2012-01-06T04:01:26.453", "references": [{"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587", "tags": ["Exploit"], "source": "secalert@redhat.com"}, {"url": "http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes", "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html", "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html", "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html", "source": "secalert@redhat.com"}, {"url": "http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507", "source": "secalert@redhat.com"}, {"url": "http://openwall.com/lists/oss-security/2011/12/19/1", "tags": ["Exploit"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/47184", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/51117", "source": "secalert@redhat.com"}, {"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://openwall.com/lists/oss-security/2011/12/19/1", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/47184", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/51117", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters."}, {"lang": "es", "value": "Una vulnerabilidad de ejecuci\u00f3n de comandos en sitios cruzados (XSS) en el m\u00f3dulo HTML-Template-Pro para Perl antes de v0.9507 permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s de los par\u00e1metros de plantilla, en relaci\u00f3n con el manejo inadecuado de los caracteres > (mayor que) y < (menor que)."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81B1E7F0-FE0B-4D92-B40E-3E872CA5C42E", "versionEndIncluding": "0.9506"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1CD158E-274C-420D-898B-F9CC70C8CA41"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA820865-D87E-4CD3-8F83-FE90D64A57BD"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1833C0A5-DC98-4E1D-8CA9-A3EFB5915F07"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FEA1D7B9-DDF3-482A-AC1F-2876E4D736CB"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01093EFF-B2E4-4F1E-B96D-F450483AD024"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.36:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E6E1EB7-0248-4EA0-AA93-8A1A602AA774"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.37:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65ED0DB5-F2E7-4AD1-8BB3-EBD0EA4F7AA5"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.38:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6745E05-ACD3-4314-BF62-FD727FA85173"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.40:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BD73986-314A-4843-A330-83BEC354BEFE"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.41:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "685F1623-7C91-4B8B-A09F-793BD09AD69B"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.42:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30A1B1EF-FB21-455D-B579-3007F271ED8D"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.43:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8203EEF8-2B0D-41C3-BE95-49EF1585A79E"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.44:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E40E636C-77F4-4921-A9B9-27698A7DCA2E"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.45:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "450C79FF-67E6-4AB7-84BE-B565DA4A3176"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.47:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FD0D6FD-1696-40EC-9F55-EE1B3F92373A"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.48:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BDD26AF-2661-42AE-B2A5-75C8D76E731C"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E20E2D3F-E5AE-4041-AB40-243A75626FD1"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.51:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1032632-2A79-4525-AD54-289AE7F253B9"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.52:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D0ECBC7-CF35-4657-8BFB-79CCF62C7691"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.53:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDE2C32D-52D4-4DBE-838F-E9CEE7FA8CF6"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.54:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9FA4702C-7DB0-4948-9082-91790DE859DE"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.55:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0ADDC952-3B10-428A-82B5-D10AFE5F97B7"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.56:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F5E8035-C5F9-495D-AF39-694C3EAD5008"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.57:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B8E54C1F-DBBF-40CA-A4B2-4EB16B60928D"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.58:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "666479C5-E7F9-4117-BBB4-7ADE9874EE69"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.59:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFDBC525-C06F-402F-8E04-30AC1F1C5741"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.61:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "474DA826-37E9-4B53-81F0-CAC36C03AAED"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.62:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78C7144C-C310-46D2-97DD-B8D5E2201A0F"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.63:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0FB8F70F-08DC-43D6-AF72-0E4AC07EBAA6"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.64:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A3BC438-61B5-434A-8461-842C024AF06D"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.65:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7989F339-467D-47BA-9E05-3741A60ADC46"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.66:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CC51B72-EAB3-404A-952F-85657336213C"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.67:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56FAD6BB-B165-4B27-A5E4-BEA09F414278"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.68:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "809FA422-C5E7-4107-A2BA-E2A388166F2F"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.69:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0DE45E38-EE33-4B81-BF17-4338029FFDA8"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.70:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C69E447-8F8C-464B-9DE7-F785AA70ABC1"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.71:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F262C32F-9740-40B6-9A9B-16C1F1D1A065"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.72:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9966C9A-A674-4B9D-8285-A1CACE90F0E3"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.73:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7AEAAE04-F3A4-4CEF-9AF2-0CD3A47F0F13"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.74:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DD97525-FEC1-43C9-A056-6BDE8EC975AB"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.75:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "159E9B66-47CF-4848-93B1-B5C43869934B"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.76:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F246C1D-D0E7-42EC-8109-514B17240788"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.77:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9785D98-5DB4-4585-A3BB-666B01A19163"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.80:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5619C91B-6205-4172-BEF1-349E0F332256"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.81:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "142F26B5-5CB1-49BB-A469-7922B6C75D3E"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.82:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "89D67852-8115-4C22-983C-C036DC2EAB04"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.83:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0FB16FF-26CC-43C4-9BFD-7728758016D5"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.84:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1886C07-3519-4E83-928D-7FE1BBDC93F2"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.85:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2A63A02-7D30-47C6-B095-DE437D50A9BD"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.86:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16A618A5-54F2-4E36-B10B-3200D6BAFCDA"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.87:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1AE3D87-7B0D-4EBE-9528-C8791537657F"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.90:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96EF9ACF-04EE-48AC-BDC2-4521C5A15805"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.92:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2855786-1E0A-4E6C-8949-E0BEF11E64F3"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.93:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "439B1BB3-6CDB-481A-A9D0-4385302C65E5"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.94:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "743B82BB-C027-4438-A153-BAB63007B0AF"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.95:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B97E94C2-9E56-4095-9B19-7708706B5900"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.9501:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F17ABA4-AE7F-473C-9113-C7A9A5FD4AC7"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.9502:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78C69AD8-6B9C-44AB-9217-08864BF7C92D"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.9503:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B606904-F051-46A7-BDD5-389E9AA62EB5"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.9504:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFAAC825-832C-49EF-933E-D6E4870D0BE6"}, {"criteria": "cpe:2.3:a:igor_vlasenko:html-template-pro:0.9505:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3AD5EE4-5D44-48C2-AA73-CCFD7E317328"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}