CVE-2010-3294 – php-pecl-apc: potential XSS in apc.php

https://notcve.org/view.php?id=CVE-2010-3294

Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en apc.php de la extensión "Alternative PHP Cache" (APC) en versiones anteriores a la v3.1.4 para PHP permite a usuarios remotos inyectar codigo de script web o código HTML de su elección a través de vectores de ataque sin especificar. • http://pecl.php.net/package-changelog.php?package=APC&release=3.1.4 http://rhn.redhat.com/errata/RHSA-2012-0811.html http://www.openwall.com/lists/oss-security/2010/09/14/1 http://www.openwall.com/lists/oss-security/2010/09/14/6 http://www.openwall.com/lists/oss-security/2010/09/14/8 http://www.vupen.com/english/advisories/2010/2406 https://access.redhat.com/security/cve/CVE-2010-3294 https://bugzilla.redhat.com/show_bug.cgi?id=634334 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •