4.3
CVSSv2

CVE-2011-0050

Published: 19/02/2011 Updated: 10/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in the nonjs interface (interfaces/nonjs.pm) in CGI:IRC prior to 0.5.10 allows remote malicious users to inject arbitrary web script or HTML via the R parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

cgiirc cgi\\ irc

Vendor Advisories

Michael Brooks (Sitewatch) discovered a reflective XSS flaw in CGI:IRC, a web based IRC client, which could lead to the execution of arbitrary javascript For the old-stable distribution (lenny), this problem has been fixed in version 059-3lenny1 For the stable distribution (squeeze), and unstable distribution (sid), this problem will be fixed s ...