CVE-2010-3266

{"id": "CVE-2010-3266", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2010-12-02T16:22:21.147", "references": [{"url": "http://btnet.svn.sourceforge.net/viewvc/btnet/RELEASE_NOTES.TXT?revision=578&view=markup", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/42418", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.coresecurity.com/content/multiple-vulnerabilities-in-bugtracker", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.exploit-db.com/exploits/15653", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/514957/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/45121", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via (1) the pcd parameter to edit_bug.aspx, (2) the bug_id parameter to edit_comment.aspx, (3) the id parameter to edit_user_permissions2.aspx, or (4) the default_name parameter to edit_customfield.aspx. NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en BugTracker.NET anterior a v3.4.5 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML a trav\u00e9s del (1) par\u00e1metro pcd para edit_bug.aspx, (2) el par\u00e1metro bug_id para edit_comment.aspx, (3) el par\u00e1metro id para edit_user_permissions2.aspx, o (4) el par\u00e1metro default_name para edit_customfield.aspx. NOTA: algunos de estos detalles han sido obtenidos de informaci\u00f3n de terceros."}], "lastModified": "2018-10-10T20:01:29.333", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DE0A0BA-D39C-4394-915C-93BF77235C4B", "versionEndIncluding": "3.4.4"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:0.91:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFF42546-0F04-4D87-8132-0F4044D2DEE8"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0810F70A-9A84-4FAB-8AA2-42361D1ADE95"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8C1063A-68F5-4B99-A34A-5417E37B0DF9"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "507DFC08-4EC7-4E4C-808D-96FB4C682F25"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.4.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19F2CB9E-4483-4CB4-B3BF-4EBDBFFCE083"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.4.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56364EDF-9012-4186-873D-B4CE3E78F88D"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "970CF80F-B6F6-45ED-AACD-4399C5582B41"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.4.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61146907-863D-4D4F-8701-1A5686364AF1"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.4.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "200AD528-DFCC-498F-B899-50BB20689D10"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B20ABBD-A2B7-49BD-97E1-CFBDFE58F106"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A878E271-8F3F-4970-B61C-E32EE219CA2A"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9334855-C2C8-43D8-8A88-07D6A426DD05"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FEE6DEE-CE01-4034-8094-6DEBE40741E6"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C105CC7-A0B9-4E33-AF9B-F9785AB65FD1"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "107D414F-003B-44F7-B1E2-E05657D951C5"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.5.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DBFEE855-1E8E-4CB8-AF55-BD36AE977354"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.5.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "506029FB-F5B3-47D3-8EFB-3A83775CE865"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.5.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7047CC7-C874-4F0E-A077-732549E263F3"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.5.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "795D1B23-E696-467C-8506-872DA571EB8E"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9CA1507D-93CE-4681-B393-2CD681FEB8FE"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18930164-2C40-40CE-994A-D50CE9175A64"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FBF7B000-F67F-4964-86A9-9D4C1A16CCC8"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C206E95C-B21F-45C7-95EF-E1FF5249492A"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F8BB5D8-720B-4178-ABD8-09EA3DFB98EB"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B7FBA85-1EE4-4BFB-85E6-EFB18BD83F02"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0FDDA4C-50FC-4126-A872-58E5294E6B8E"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.6.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9EC26B13-E1D5-40A6-A5E1-F6E1B16D3D8C"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.6.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C12B092-328A-4ACE-897F-D500F9AD269B"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.6.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD6163E1-AF78-4CE7-8506-518614C83EEF"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D14EE853-8B0F-48D4-A4B2-C25615B3B2FC"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1FFCBEE-17ED-46AA-B1C6-5C44AEB160C1"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72B7F7C2-6C8D-43F7-8AC8-5D557CDF0FA7"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "273269A2-3D43-4DB6-A941-DDADA6936538"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "562AE9F0-F3FB-4C91-A492-EB37243E82AA"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.7.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40BC27FB-0CD5-4F63-8EF4-5A0AB36287C7"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.7.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1326B1F8-9C8F-4A51-BA2F-C7B7D04B1C65"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.7.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C9802EC-7E48-4A6A-A3EA-3FFA86251F24"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.7.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D927C4C6-E73C-4D0D-9907-F8573BE92903"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.7.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF5DA4FA-6F60-41EA-9440-E9A440B5146B"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7F7AA3F-1520-4791-A3FF-AF709B7CAF0B"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C61BA750-5746-4ED3-BA09-9C6FE106B975"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45EE271D-C518-4686-9B33-6B577F284BA7"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.8.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7532BA95-C8EB-4B6F-A17A-74E004112AF3"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.8.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4C5E4E4-3007-4248-819D-8DA22E33FA88"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7162777F-CC25-44D0-A7F9-E6C28496B488"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.8.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA279C2B-8272-4D2C-9896-2953D506F216"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.8.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2D79BCB-BECB-4F9D-9638-11DD13937192"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.8.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5CC2DB8-89BB-4830-B415-08666F81F898"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.8.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FBB49B8-0C24-408F-BE10-EC3E7EC8017D"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DC4DF966-7635-4B12-B9C2-0B11DD1B3494"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "97D96170-698F-4C4C-B1CE-ADDA41EF7988"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "818B679A-8B68-4951-A93D-E43E7DE5C175"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CE544B6-727C-491B-825B-2F0363A17ABE"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.9.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54140434-0CAD-46D0-830E-E162AD887B94"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.9.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D74D838-C925-47C5-BA10-DCEC4BE094CA"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.9.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F99D478-337E-4C66-82CC-4E57C25B2DE8"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.9.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D649CB6-E951-4B09-859A-1C136048F912"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.9.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48C8509A-5C82-4A3F-944D-7F70C42E6B51"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:2.9.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFD726F2-355F-4FDD-8717-22E0742D9535"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78CA28C0-D2B2-4E15-910F-9AB074F41E7F"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25D3AC38-0C8F-41E8-9A0F-90F97F2B7A18"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D08A433-CF63-4766-8F8C-784A58A11826"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6AB18E43-2D60-4C87-A41D-D81FD47A5CF0"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3735EFA-A1F8-4390-BD73-46EB3F16A61A"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D300E29-CE89-4AA2-8E01-A94B502C5521"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DFDF6E4-156F-4F42-936B-BDA144B46507"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99CD46B1-7542-4AA8-9559-D2DF978EFE15"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "489BEE66-909B-414A-8120-3B90E8F1BA61"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0AD07DC1-8106-4AEE-A7BB-B450B8F27CCA"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E5F6C82-65AA-400A-9653-A00425F2F535"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06F523EE-57C9-4334-931F-3EA6887AF612"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44E56DC2-4BBA-480A-9C92-C6F1D9F41263"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C01D7B71-99E2-4A85-96D9-4EBE9DD8CB79"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05A2A3B2-C4C2-4B95-B5AD-2FF0549641C7"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "328A4053-E91F-4152-B56B-0266749AA5DF"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.1.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DF7279F-5A9C-4D2F-9375-5E08AADEA3A5"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.1.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8881AAC-0A73-4F1A-8ED9-436DD0A96206"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.1.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45A028B1-E878-4CF8-80B2-69D8DF6C07EF"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "202EC0B8-F464-4F7D-A5FA-A33FAB3EBFC2"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.3.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E2DDB80-90AF-48B2-9C3A-45C00C829E69"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C680FEC2-6211-485D-B937-334CB4F1F822"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04FC418C-E0BD-47EE-B386-DDB7E82F0863"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B6624EE-8746-418E-86ED-D484C76696A2"}, {"criteria": "cpe:2.3:a:ifdefined:bugtracker.net:3.4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B82A08D6-D753-41A2-BF07-22B40917C85F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}