{"id":"CVE-2010-1104","state":"PUBLISHED","title":"Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attac","description":"Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages.","publishedAt":"2010-03-25T17:00:00.000Z","updatedAt":"2024-08-07T01:14:06.107Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://www.vupen.com/english/advisories/2010/0104","http://www.securityfocus.com/bid/37765","http://www.osvdb.org/61655","https://exchange.xforce.ibmcloud.com/vulnerabilities/55599","https://mail.zope.org/pipermail/zope-announce/2010-January/002229.html","http://secunia.com/advisories/38007"],"weaknesses":[],"ingestedAt":"2026-10-29T19:39:35.079Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2010/1xxx/CVE-2010-1104.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2010-1104","state":"PUBLISHED","datePublished":"2010-03-25T17:00:00.000Z","dateUpdated":"2024-08-07T01:14:06.107Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2010-03-25T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2010/0104","name":"ADV-2010-0104","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www.securityfocus.com/bid/37765","name":"37765","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.osvdb.org/61655","name":"61655","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55599","name":"zope-standarderrormessage-xss(55599)","tags":["vdb-entry","x_refsource_XF"]},{"url":"https://mail.zope.org/pipermail/zope-announce/2010-January/002229.html","name":"[zope-announce] 20100112 New Zope2 releases available","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://secunia.com/advisories/38007","name":"38007","tags":["third-party-advisory","x_refsource_SECUNIA"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2010-01-12T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-1104","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ADV-2010-0104","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/0104"},{"name":"37765","refsource":"BID","url":"http://www.securityfocus.com/bid/37765"},{"name":"61655","refsource":"OSVDB","url":"http://www.osvdb.org/61655"},{"name":"zope-standarderrormessage-xss(55599)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55599"},{"name":"[zope-announce] 20100112 New Zope2 releases available","refsource":"MLIST","url":"https://mail.zope.org/pipermail/zope-announce/2010-January/002229.html"},{"name":"38007","refsource":"SECUNIA","url":"http://secunia.com/advisories/38007"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.vupen.com/english/advisories/2010/0104","name":"ADV-2010-0104","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/37765","name":"37765","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.osvdb.org/61655","name":"61655","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55599","name":"zope-standarderrormessage-xss(55599)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://mail.zope.org/pipermail/zope-announce/2010-January/002229.html","name":"[zope-announce] 20100112 New Zope2 releases available","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://secunia.com/advisories/38007","name":"38007","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T01:14:06.107Z"}}]}}}