Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/51117 | vdb-entry x_refsource_BID |
| http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html | vendor-advisory x_refsource_FEDORA |
| http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html | vendor-advisory x_refsource_FEDORA |
| http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html | vendor-advisory x_refsource_FEDORA |
| http://openwall.com/lists/oss-security/2011/12/19/1 | mailing-list x_refsource_MLIST |
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587 | x_refsource_CONFIRM |
| http://secunia.com/advisories/47184 | third-party-advisory x_refsource_SECUNIA |
| http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507 | x_refsource_CONFIRM |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes | x_refsource_CONFIRM x_transferred |
| http://www.securityfocus.com/bid/51117 | vdb-entry x_refsource_BID x_transferred |
| http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html | vendor-advisory x_refsource_FEDORA x_transferred |
| http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html | vendor-advisory x_refsource_FEDORA x_transferred |
| http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html | vendor-advisory x_refsource_FEDORA x_transferred |
| http://openwall.com/lists/oss-security/2011/12/19/1 | mailing-list x_refsource_MLIST x_transferred |
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587 | x_refsource_CONFIRM x_transferred |
| http://secunia.com/advisories/47184 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507 | x_refsource_CONFIRM x_transferred |