{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-09-14T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-07-23T09:00:00", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://pecl.php.net/package-changelog.php?package=APC&release=3.1.4"}, {"name": "ADV-2010-2406", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2010/2406"}, {"name": "[oss-security] 20100914 Re: CVE request: xss in pecl-apc before 3.1.4", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2010/09/14/6"}, {"name": "RHSA-2012:0811", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://rhn.redhat.com/errata/RHSA-2012-0811.html"}, {"name": "[oss-security] 20100914 CVE request: xss in pecl-apc before 3.1.4", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2010/09/14/1"}, {"name": "[oss-security] 20100914 Re: CVE request: xss in pecl-apc before 3.1.4", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2010/09/14/8"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T03:03:18.918Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://pecl.php.net/package-changelog.php?package=APC&release=3.1.4"}, {"name": "ADV-2010-2406", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2010/2406"}, {"name": "[oss-security] 20100914 Re: CVE request: xss in pecl-apc before 3.1.4", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2010/09/14/6"}, {"name": "RHSA-2012:0811", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://rhn.redhat.com/errata/RHSA-2012-0811.html"}, {"name": "[oss-security] 20100914 CVE request: xss in pecl-apc before 3.1.4", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2010/09/14/1"}, {"name": "[oss-security] 20100914 Re: CVE request: xss in pecl-apc before 3.1.4", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2010/09/14/8"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2010-3294", "datePublished": "2010-09-24T18:00:00", "dateReserved": "2010-09-13T00:00:00", "dateUpdated": "2024-08-07T03:03:18.918Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:*:p1:*:*:*:*:*:*", "matchCriteriaId": "898279E0-1F9A-4D45-9902-6D9C2153B30E", "versionEndIncluding": "3.1.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "2912FEC9-E71E-431C-ACA7-27C0A8E6B107", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "6FEC80D4-0550-4C59-9392-6EF1361C0D7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "9C8AB12D-D0BB-4628-9F6F-B716C1ACC3A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:2.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "22F8AFE5-A612-4250-BB99-88F108835BD9", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "89BE7CB7-EC2C-419F-82B9-3D1ADEBF6DC0", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "EDEFF307-0EE8-49A8-B10F-EEC1DC2FEF4F", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "ABA1C3CB-7B1A-4BF3-9791-F699D5B33CBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "99F9F5F7-957E-49B1-A58E-B4BC2B02B755", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "D1360E41-F961-4915-83EB-9D3E41FB26F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "5ECA9D41-000B-4F3E-BAF4-6D42DAB39731", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "E7544B6B-D153-4937-8FE6-C06246642917", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "EA23F233-C2D0-43B3-AA15-D459BE760C04", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "8A1A28E4-655D-483E-BCEE-2423290850A3", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "B41719E9-1268-49B1-837C-0AFDD151A7A8", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.10:*:*:*:*:*:*:*", "matchCriteriaId": "A8B9EEB5-472F-44BA-BEE7-07E1BDE2FCD8", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.11:*:*:*:*:*:*:*", "matchCriteriaId": "1C918A8A-DC10-4ECC-852E-3738A89F874C", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:*:*:*:*:*:*:*", "matchCriteriaId": "D615703C-94A1-41D1-BB09-C76195A29A46", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:p1:*:*:*:*:*:*", "matchCriteriaId": "638C2836-35FE-49AF-ABF7-1936742AB021", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:p2:*:*:*:*:*:*", "matchCriteriaId": "088936F3-F52F-4C35-83E3-A8D4847703A8", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.13:*:*:*:*:*:*:*", "matchCriteriaId": "86A81C28-309E-44CE-9221-3B1CB84DD981", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "A496D93C-375A-4B06-BC5B-0AB9B41BB6BE", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.15:*:*:*:*:*:*:*", "matchCriteriaId": "B3318828-8848-4B4E-8FCD-A12A6EC3E733", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.16:*:*:*:*:*:*:*", "matchCriteriaId": "48DE97C6-4950-4337-9913-03A8C7D70E46", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.17:*:*:*:*:*:*:*", "matchCriteriaId": "95FAD318-61E4-4E63-8452-9BC1648F1743", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.18:*:*:*:*:*:*:*", "matchCriteriaId": "B582BF89-C915-4C00-B3D2-88F349D64EEB", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.0.19:*:*:*:*:*:*:*", "matchCriteriaId": "687D64D6-600F-4143-B80F-38FF9584E323", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "0839C225-9FE1-4016-805F-90AFC8EA4E26", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "B97851F4-0B94-48CE-A65E-AA23581D6C94", "vulnerable": true}, {"criteria": "cpe:2.3:a:pecl-php:alternative_php_cache:3.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "257F7098-16E9-494F-AD14-DFC97FF17389", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en apc.php de la extensi\u00f3n \"Alternative PHP Cache\" (APC) en versiones anteriores a la v3.1.4 para PHP permite a usuarios remotos inyectar codigo de script web o c\u00f3digo HTML de su elecci\u00f3n a trav\u00e9s de vectores de ataque sin especificar."}], "id": "CVE-2010-3294", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2010-09-24T19:00:04.933", "references": [{"source": "secalert@redhat.com", "url": "http://pecl.php.net/package-changelog.php?package=APC&release=3.1.4"}, {"source": "secalert@redhat.com", "url": "http://rhn.redhat.com/errata/RHSA-2012-0811.html"}, {"source": "secalert@redhat.com", "url": "http://www.openwall.com/lists/oss-security/2010/09/14/1"}, {"source": "secalert@redhat.com", "url": "http://www.openwall.com/lists/oss-security/2010/09/14/6"}, {"source": "secalert@redhat.com", "url": "http://www.openwall.com/lists/oss-security/2010/09/14/8"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2010/2406"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://pecl.php.net/package-changelog.php?package=APC&release=3.1.4"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://rhn.redhat.com/errata/RHSA-2012-0811.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2010/09/14/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2010/09/14/6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2010/09/14/8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2010/2406"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2012:0811", "cpe": "cpe:/o:redhat:enterprise_linux:6", "package": "php-pecl-apc-0:3.1.9-2.el6", "product_name": "Red Hat Enterprise Linux 6", "release_date": "2012-06-19T00:00:00Z"}], "bugzilla": {"description": "php-pecl-apc: potential XSS in apc.php", "id": "634334", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=634334"}, "csaw": false, "cvss": {"cvss_base_score": "2.6", "cvss_scoring_vector": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "status": "verified"}, "cwe": "CWE-79", "details": ["Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."], "name": "CVE-2010-3294", "public_date": "2010-08-05T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2010-3294\nhttps://nvd.nist.gov/vuln/detail/CVE-2010-3294"], "threat_severity": "Low"}