Vulnerability in Postrev Post Revolution
CVE-2011-1952
common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML markup, as demonstrated by an a< sequence.
EPSS: 0.015 (72.4th percentile) — read the EPSS interpretation.
Affected products
- Postrev Post_revolution — versions 0.6.2, 0.6.3, 0.6.4
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (Exploit, x_refsource_MISC)
- secalert@redhat.com (x_refsource_SREASON, third-party-advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Patch)