Approved changes feed: RSS · Atom

cpe:2.3:a:mhonarc:mhonarc:2.6.16:*:*:*:*:*:*:*

part: a version: 2.6.16 update: *

VendorMhonarc (8a3a87fd-1428-5b7f-856b-05347237bc1e)
ProductMhonarc (51558567-e62e-5b46-bf0d-32868882e742)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:cpan/mhonarc purl2cpe 2026-06-01 10:11:28.440448
pkg:github/sympa-community/mhonarc purl2cpe 2026-06-01 10:11:28.440450

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-4524 vulnerable 2026-06-08 04:56:28.931898 Details available
Cross-site scripting (XSS) vulnerability in lib/mhtxthtml.pl in MHonArc 2.6.16 allows remote attackers to inject arbitrary web script or HTML via a malformed start tag and end tag for a SCRIPT element, as demonstrated by <scr<body>ipt> and </scr<body>ipt> sequences.
Published: 2011-01-03T19:26:00.000Z
Updated: 2024-08-07T03:51:17.051Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1677 vulnerable 2026-06-08 04:54:09.899685 Details available
MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed within other start tags, as demonstrated by a <bo<bo<bo<bo<body>dy>dy>dy>dy> sequence, a different vulnerability than CVE-2010-4524.
Published: 2011-01-03T19:26:00.000Z
Updated: 2024-08-07T01:35:53.485Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.