Lucene search

[email protected]CVE-2010-2043

HistoryMay 25, 2010 - 2:30 p.m.

CVE-2010-2043

2010-05-2514:30:01

CWE-79

[email protected]

web.nvd.nist.gov

cve-2010-2043

xss

home.aspx

datatrack system

vulnerability

security

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.2%

JSON

Cross-site scripting (XSS) vulnerability in Home.aspx in DataTrack System 3.5 and 3.5.8019.4 allows remote attackers to inject arbitrary web script or HTML via the Work_Order_Summary parameter (aka the request summary). NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

magnowaredatatrack_systemMatch3.5

magnowaredatatrack_systemMatch3.5.8019.4

CPENameOperatorVersion
magnoware:datatrack_systemmagnoware datatrack systemeq3.5
magnoware:datatrack_systemmagnoware datatrack systemeq3.5.8019.4

CPE	Name	Operator	Version
magnoware:datatrack_system	magnoware datatrack system	eq	3.5
magnoware:datatrack_system	magnoware datatrack system	eq	3.5.8019.4

References

cross-site-scripting.blogspot.com/2010/05/datatrack-system-35-persistent-xss.html

osvdb.org/64727

packetstormsecurity.org/1005-exploits/datatrackserver35-xss.txt

secunia.com/advisories/39868

www.securityfocus.com/bid/40249

exchange.xforce.ibmcloud.com/vulnerabilities/58732

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.2%

JSON

Related for CVE-2010-2043

nvd1 cvelist1 prion1 openvas2