Lucene search

K
cveMitreCVE-2010-2046
HistoryMay 25, 2010 - 6:30 p.m.

CVE-2010-2046

2010-05-2518:30:01
CWE-79
mitre
web.nvd.nist.gov
20
cve-2010-2046
cross-site scripting
xss
activehelper livehelp
joomla
security vulnerabilities

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.01

Percentile

83.7%

Multiple cross-site scripting (XSS) vulnerabilities in the ActiveHelper LiveHelp (com_activehelper_livehelp) component 2.0.3 for Joomla! allow remote attackers to inject arbitrary web script or HTML via (1) the DOMAINID parameter to server/cookies.php or (2) the SERVER parameter to server/index.php.

Affected configurations

Nvd
Node
activehelpercom_activehelper_livehelpMatch2.0.3
AND
joomlajoomla\!
VendorProductVersionCPE
activehelpercom_activehelper_livehelp2.0.3cpe:2.3:a:activehelper:com_activehelper_livehelp:2.0.3:*:*:*:*:*:*:*
joomlajoomla\!*cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.01

Percentile

83.7%

Related for CVE-2010-2046