CVE-2011-4616 Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to impro...
MediumCVSS 4.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libhtml-template-pro-perl(Debian:12) | < 0.9507-1 | 0.9507-1 |
| debian/libhtml-template-pro-perl(Debian:13) | < 0.9507-1 | 0.9507-1 |
| debian/libhtml-template-pro-perl(Debian:14) | < 0.9507-1 | 0.9507-1 |
| igor vlasenko html-template-pro | <= 0.9506 | No fix listed |
| igor vlasenko html-template-pro | = 0.01 | No fix listed |
| igor vlasenko html-template-pro | = 0.17 | No fix listed |
| igor vlasenko html-template-pro | = 0.26 | No fix listed |
| igor vlasenko html-template-pro | = 0.34 | No fix listed |
| igor vlasenko html-template-pro | = 0.35 | No fix listed |
| igor vlasenko html-template-pro | = 0.36 | No fix listed |
| igor vlasenko html-template-pro | = 0.37 | No fix listed |
| igor vlasenko html-template-pro | = 0.38 | No fix listed |
| igor vlasenko html-template-pro | = 0.40 | No fix listed |
| igor vlasenko html-template-pro | = 0.41 | No fix listed |
| igor vlasenko html-template-pro | = 0.42 | No fix listed |
| igor vlasenko html-template-pro | = 0.43 | No fix listed |
| igor vlasenko html-template-pro | = 0.44 | No fix listed |
| igor vlasenko html-template-pro | = 0.45 | No fix listed |
| igor vlasenko html-template-pro | = 0.47 | No fix listed |
| igor vlasenko html-template-pro | = 0.48 | No fix listed |
| igor vlasenko html-template-pro | = 0.50 | No fix listed |
| igor vlasenko html-template-pro | = 0.51 | No fix listed |
| igor vlasenko html-template-pro | = 0.52 | No fix listed |
| igor vlasenko html-template-pro | = 0.53 | No fix listed |
| igor vlasenko html-template-pro | = 0.54 | No fix listed |
Show 40 more
| Product | Affected versions | Fixed in |
|---|---|---|
| igor vlasenko html-template-pro | = 0.55 | No fix listed |
| igor vlasenko html-template-pro | = 0.56 | No fix listed |
| igor vlasenko html-template-pro | = 0.57 | No fix listed |
| igor vlasenko html-template-pro | = 0.58 | No fix listed |
| igor vlasenko html-template-pro | = 0.59 | No fix listed |
| igor vlasenko html-template-pro | = 0.61 | No fix listed |
| igor vlasenko html-template-pro | = 0.62 | No fix listed |
| igor vlasenko html-template-pro | = 0.63 | No fix listed |
| igor vlasenko html-template-pro | = 0.64 | No fix listed |
| igor vlasenko html-template-pro | = 0.65 | No fix listed |
| igor vlasenko html-template-pro | = 0.66 | No fix listed |
| igor vlasenko html-template-pro | = 0.67 | No fix listed |
| igor vlasenko html-template-pro | = 0.68 | No fix listed |
| igor vlasenko html-template-pro | = 0.69 | No fix listed |
| igor vlasenko html-template-pro | = 0.70 | No fix listed |
| igor vlasenko html-template-pro | = 0.71 | No fix listed |
| igor vlasenko html-template-pro | = 0.72 | No fix listed |
| igor vlasenko html-template-pro | = 0.73 | No fix listed |
| igor vlasenko html-template-pro | = 0.74 | No fix listed |
| igor vlasenko html-template-pro | = 0.75 | No fix listed |
| igor vlasenko html-template-pro | = 0.76 | No fix listed |
| igor vlasenko html-template-pro | = 0.77 | No fix listed |
| igor vlasenko html-template-pro | = 0.80 | No fix listed |
| igor vlasenko html-template-pro | = 0.81 | No fix listed |
| igor vlasenko html-template-pro | = 0.82 | No fix listed |
| igor vlasenko html-template-pro | = 0.83 | No fix listed |
| igor vlasenko html-template-pro | = 0.84 | No fix listed |
| igor vlasenko html-template-pro | = 0.85 | No fix listed |
| igor vlasenko html-template-pro | = 0.86 | No fix listed |
| igor vlasenko html-template-pro | = 0.87 | No fix listed |
| igor vlasenko html-template-pro | = 0.90 | No fix listed |
| igor vlasenko html-template-pro | = 0.92 | No fix listed |
| igor vlasenko html-template-pro | = 0.93 | No fix listed |
| igor vlasenko html-template-pro | = 0.94 | No fix listed |
| igor vlasenko html-template-pro | = 0.95 | No fix listed |
| igor vlasenko html-template-pro | = 0.9501 | No fix listed |
| igor vlasenko html-template-pro | = 0.9502 | No fix listed |
| igor vlasenko html-template-pro | = 0.9503 | No fix listed |
| igor vlasenko html-template-pro | = 0.9504 | No fix listed |
| igor vlasenko html-template-pro | = 0.9505 | No fix listed |
References
- Debian Security Tracker CVE-2011-4616 vendor-advisory
- bugs.debian.org exploit
- cpansearch.perl.org
- FEDORA-2012-15439 vendor-advisory
- FEDORA-2012-15490 vendor-advisory
- FEDORA-2012-15482 vendor-advisory
- metacpan.org
- [oss-security] 20111218 CVE for HTML-Template-Pro 0.9506 XSS exploit mailing-list
- 47184 third-party-advisory vendor-advisory
- 51117 vdb-entry
- bugs.debian.org issue-tracking