Cross-site scripting (XSS) vulnerability in Mod_survey 3.0.x before 3.0.16-pre2 and 3.2.x before 3.2.0-pre4 allows remote attackers to inject arbitrary web script or HTML via the certain survey fields or error messages for malformed query strings.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mod_survey | Joel_palmius | 3.0.0 (including) | 3.0.0 (including) |
| Mod_survey | Joel_palmius | 3.0.1 (including) | 3.0.1 (including) |
| Mod_survey | Joel_palmius | 3.0.2 (including) | 3.0.2 (including) |
| Mod_survey | Joel_palmius | 3.0.3 (including) | 3.0.3 (including) |
| Mod_survey | Joel_palmius | 3.0.4 (including) | 3.0.4 (including) |
| Mod_survey | Joel_palmius | 3.0.5 (including) | 3.0.5 (including) |
| Mod_survey | Joel_palmius | 3.0.6 (including) | 3.0.6 (including) |
| Mod_survey | Joel_palmius | 3.0.9 (including) | 3.0.9 (including) |
| Mod_survey | Joel_palmius | 3.0.10 (including) | 3.0.10 (including) |
| Mod_survey | Joel_palmius | 3.0.11 (including) | 3.0.11 (including) |
| Mod_survey | Joel_palmius | 3.0.12 (including) | 3.0.12 (including) |
| Mod_survey | Joel_palmius | 3.0.13 (including) | 3.0.13 (including) |
| Mod_survey | Joel_palmius | 3.0.14 (including) | 3.0.14 (including) |
| Mod_survey | Joel_palmius | 3.0.14d (including) | 3.0.14d (including) |
| Mod_survey | Joel_palmius | 3.0.14e (including) | 3.0.14e (including) |
| Mod_survey | Joel_palmius | 3.0.15 (including) | 3.0.15 (including) |
| Mod_survey | Joel_palmius | 3.0.15_pre1 (including) | 3.0.15_pre1 (including) |
| Mod_survey | Joel_palmius | 3.0.15_pre2 (including) | 3.0.15_pre2 (including) |
| Mod_survey | Joel_palmius | 3.0.15_pre3 (including) | 3.0.15_pre3 (including) |
| Mod_survey | Joel_palmius | 3.0.15_pre4 (including) | 3.0.15_pre4 (including) |
| Mod_survey | Joel_palmius | 3.0.15_pre5 (including) | 3.0.15_pre5 (including) |
| Mod_survey | Joel_palmius | 3.0.15_pre6 (including) | 3.0.15_pre6 (including) |
| Mod_survey | Joel_palmius | 3.0.16_pre1 (including) | 3.0.16_pre1 (including) |
| Mod_survey | Joel_palmius | 3.2.0_pre1 (including) | 3.2.0_pre1 (including) |
| Mod_survey | Joel_palmius | 3.2.0_pre2 (including) | 3.2.0_pre2 (including) |
| Mod_survey | Joel_palmius | 3.2.0_pre3 (including) | 3.2.0_pre3 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=107997967421972\u0026w=2
- http://securitytracker.com/id?1009516
- http://www.securityfocus.com/bid/9941
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15582
- http://marc.info/?l=bugtraq\u0026m=107997967421972\u0026w=2
- http://securitytracker.com/id?1009516
- http://www.securityfocus.com/bid/9941
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15582