Cross-site scripting (XSS) vulnerability in CGI wrapper for IP Calculator (IPCalc) 0.40 allows remote attackers to inject arbitrary web script or HTML via the URI (REQUEST_URI environment variable), which is used in the actionurl variable.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Ip_calculator | Krischan_jodies | 0.40 (including) | 0.40 (including) |
Ipcalc | Ubuntu | dapper | * |
Ipcalc | Ubuntu | devel | * |
Ipcalc | Ubuntu | edgy | * |
Ipcalc | Ubuntu | feisty | * |
Ipcalc | Ubuntu | gutsy | * |
Ipcalc | Ubuntu | hardy | * |
Ipcalc | Ubuntu | intrepid | * |
Ipcalc | Ubuntu | jaunty | * |
Ipcalc | Ubuntu | karmic | * |