Lucene search

[email protected]CVE-2010-4097

HistoryOct 27, 2010 - 7:00 p.m.

CVE-2010-4097

2010-10-2719:00:11

CWE-79

[email protected]

web.nvd.nist.gov

cve

2010

4097

xss

aardvark topsites php

web

security

vulnerability

remote attack

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) mail, (2) title, (3) u, and (4) url parameters. NOTE: the q parameter is already covered by CVE-2009-2302.

Affected configurations

NVD

Node

avaticaardvark_topsites_phpMatch5.2.0

avaticaardvark_topsites_phpMatch5.2.1

CPENameOperatorVersion
avatic:aardvark_topsites_phpavatic aardvark topsites phpeq5.2.0
avatic:aardvark_topsites_phpavatic aardvark topsites phpeq5.2.1

CPE	Name	Operator	Version
avatic:aardvark_topsites_php	avatic aardvark topsites php	eq	5.2.0
avatic:aardvark_topsites_php	avatic aardvark topsites php	eq	5.2.1

References

www.securityfocus.com/archive/1/514423/100/0/threaded

www.securityfocus.com/bid/44390

exchange.xforce.ibmcloud.com/vulnerabilities/62767

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%

JSON

Related for CVE-2010-4097

cvelist2 nvd2 prion2 openvas2 cve1