Lucene search
MitreCVE-2010-0374HistoryJan 21, 2010 - 10:30 p.m.
CVE-2010-0374
2010-01-2122:30:00
CWE-79
mitre
web.nvd.nist.gov
28
joomla
marketplace
xss
vulnerability
remote attack
injection
web script
html
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.002
Percentile
57.2%
Cross-site scripting (XSS) vulnerability in the Marketplace (com_marketplace) component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the catid parameter in a show_category action to index.php.
Affected configurations
Node
codingfishcom_marketplaceMatch1.2
joomlajoomla\!
| Vendor | Product | Version | CPE |
|---|---|---|---|
| codingfish | com_marketplace | 1.2 | cpe:2.3:a:codingfish:com_marketplace:1.2:*:*:*:*:*:*:* |
| joomla | joomla\! | * | cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2010-0374
2010-01-21 22:30:00
prion
prion
Cross site scripting
2010-01-21 22:30:00
cvelist
cvelist
CVE-2010-0374
2010-01-21 22:00:00
exploitdb
exploitdb
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.002
Percentile
57.2%
Related for CVE-2010-0374