Lucene search
HistoryJul 25, 2010 - 2:04 a.m.
CVE-2010-2852
cve-2010-2852
cross-site scripting
xss vulnerability
runcms 2.1
nvd
5.9 Medium
AI Score
Confidence
High
2.6 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
73.7%
Cross-site scripting (XSS) vulnerability in modules/headlines/magpierss/scripts/magpie_debug.php in RunCms 2.1, when the Headlines module is enabled, allows remote attackers to inject arbitrary web script or HTML via the url parameter.
Affected configurations
Node
runcmsruncmsMatch2.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| runcms:runcms | runcms | eq | 2.1 |
Related
cvelist
cvelist
CVE-2010-2852
2010-07-23 20:00:00
nvd
nvd
CVE-2010-2852
2010-07-25 02:04:14
prion
prion
Cross site scripting
2010-07-25 02:04:00
5.9 Medium
AI Score
Confidence
High
2.6 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
73.7%
Related for CVE-2010-2852