CVE-2010-3294 Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vec...
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pecl-php alternative php cache | <= 3.1.3 | No fix listed |
| pecl-php alternative php cache | = 2.0 | No fix listed |
| pecl-php alternative php cache | = 2.0.2 | No fix listed |
| pecl-php alternative php cache | = 2.0.3 | No fix listed |
| pecl-php alternative php cache | = 2.0.4 | No fix listed |
| pecl-php alternative php cache | = 3.0.0 | No fix listed |
| pecl-php alternative php cache | = 3.0.1 | No fix listed |
| pecl-php alternative php cache | = 3.0.2 | No fix listed |
| pecl-php alternative php cache | = 3.0.3 | No fix listed |
| pecl-php alternative php cache | = 3.0.4 | No fix listed |
| pecl-php alternative php cache | = 3.0.5 | No fix listed |
| pecl-php alternative php cache | = 3.0.6 | No fix listed |
| pecl-php alternative php cache | = 3.0.7 | No fix listed |
| pecl-php alternative php cache | = 3.0.8 | No fix listed |
| pecl-php alternative php cache | = 3.0.9 | No fix listed |
| pecl-php alternative php cache | = 3.0.10 | No fix listed |
| pecl-php alternative php cache | = 3.0.11 | No fix listed |
| pecl-php alternative php cache | = 3.0.12 | No fix listed |
| pecl-php alternative php cache | = 3.0.12-p1 | No fix listed |
| pecl-php alternative php cache | = 3.0.12-p2 | No fix listed |
| pecl-php alternative php cache | = 3.0.13 | No fix listed |
| pecl-php alternative php cache | = 3.0.14 | No fix listed |
| pecl-php alternative php cache | = 3.0.15 | No fix listed |
| pecl-php alternative php cache | = 3.0.16 | No fix listed |
| pecl-php alternative php cache | = 3.0.17 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pecl-php alternative php cache | = 3.0.18 | No fix listed |
| pecl-php alternative php cache | = 3.0.19 | No fix listed |
| pecl-php alternative php cache | = 3.1.1 | No fix listed |
| pecl-php alternative php cache | = 3.1.2 | No fix listed |
| pecl-php alternative php cache | = 3.1.3 | No fix listed |
References
- pecl.php.net
- RHSA-2012:0811 vendor-advisory
- [oss-security] 20100914 CVE request: xss in pecl-apc before 3.1.4 mailing-list
- [oss-security] 20100914 Re: CVE request: xss in pecl-apc before 3.1.4 mailing-list
- [oss-security] 20100914 Re: CVE request: xss in pecl-apc before 3.1.4 mailing-list
- ADV-2010-2406 vdb-entry vendor-advisory