CVE-2010-3841

Published: Oct 18, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the rev parameter to the view script or (2) the query string to the login script.

Affected (24)

Products: Twiki: Twiki

Twiki

1 product

Twiki

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Twiki Twiki	Up to 5.0.0
Twiki Twiki	Version 2000-12-01
Twiki Twiki	Version 2001-09-01
Twiki Twiki	Version 2001-12-01
Twiki Twiki	Version 2003-02-01
Twiki Twiki	Version 2004-09-01
Twiki Twiki	Version 2004-09-02
Twiki Twiki	Version 2004-09-03
Twiki Twiki	Version 2004-09-04
Twiki Twiki	Version 4.0.0
Twiki Twiki	Version 4.0.1
Twiki Twiki	Version 4.0.2
Twiki Twiki	Version 4.0.3
Twiki Twiki	Version 4.0.4
Twiki Twiki	Version 4.0.5
Twiki Twiki	Version 4.1.0
Twiki Twiki	Version 4.1.1
Twiki Twiki	Version 4.1.2
Twiki Twiki	Version 4.2.2
Twiki Twiki	Version 4.2.3
Twiki Twiki	Version 4.2.4
Twiki Twiki	Version 4.3.0
Twiki Twiki	Version 4.3.1
Twiki Twiki	Version 4.3.2