CVE-2011-1952 common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML markup, as demonstrated by an a< sequence.
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML markup, as demonstrated by an a< sequence.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| postrev post revolution | <= 0.8.0c | No fix listed |
| postrev post revolution | = 0.6.2-beta | No fix listed |
| postrev post revolution | = 0.6.3-beta | No fix listed |
| postrev post revolution | = 0.6.4 | No fix listed |
| postrev post revolution | = 0.6.5 | No fix listed |
| postrev post revolution | = 0.6.6 | No fix listed |
| postrev post revolution | = 0.7.0-rc1 | No fix listed |
| postrev post revolution | = 0.7.0-rc2 | No fix listed |
| postrev post revolution | = 0.7.0-rc3 | No fix listed |
| postrev post revolution | = 0.7.0-rc4 | No fix listed |
| postrev post revolution | = 0.8.0-alpha | No fix listed |
| postrev post revolution | = 0.8.0b | No fix listed |
References
- javierb.com.ar exploit
- postrev.com.ar patch
- 8270 third-party-advisory
- 20110601 Post Revolution 0.8.0c Multiple Remote Vulnerabilities mailing-list
- 47967 vdb-entry