Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-4355
HistoryDec 01, 2010 - 4:06 p.m.

CVE-2010-4355

2010-12-0116:06:13
CWE-79
[email protected]
web.nvd.nist.gov
19
cve-2010-4355
xss
dadabik
web script injection
html injection
security vulnerability

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

Cross-site scripting (XSS) vulnerability in DaDaBIK before 4.3 beta2, when the insert or edit feature is enabled, allows remote authenticated users to inject arbitrary web script or HTML via the select_single parameter.

Affected configurations

NVD
Node
dadabikdadabikRange≤4.3beta_rc1
OR
dadabikdadabikMatch1.0beta
OR
dadabikdadabikMatch1.0.1beta
OR
dadabikdadabikMatch1.0.2beta
OR
dadabikdadabikMatch1.0.3beta
OR
dadabikdadabikMatch1.0.4beta
OR
dadabikdadabikMatch1.0.5beta
OR
dadabikdadabikMatch1.1beta
OR
dadabikdadabikMatch1.5
OR
dadabikdadabikMatch1.5b
OR
dadabikdadabikMatch1.6
OR
dadabikdadabikMatch1.7
OR
dadabikdadabikMatch1.8
OR
dadabikdadabikMatch1.9
OR
dadabikdadabikMatch1.9.1
OR
dadabikdadabikMatch2.0beta
OR
dadabikdadabikMatch2.0.1beta
OR
dadabikdadabikMatch2.1beta
OR
dadabikdadabikMatch2.1bbeta
OR
dadabikdadabikMatch2.2beta
OR
dadabikdadabikMatch2.2.1
OR
dadabikdadabikMatch2.2.1beta
OR
dadabikdadabikMatch3.0
OR
dadabikdadabikMatch3.0beta
OR
dadabikdadabikMatch3.1beta
OR
dadabikdadabikMatch3.2
OR
dadabikdadabikMatch3.2beta
OR
dadabikdadabikMatch4.0
OR
dadabikdadabikMatch4.0alpha
OR
dadabikdadabikMatch4.0beta
OR
dadabikdadabikMatch4.0beta2
OR
dadabikdadabikMatch4.1
OR
dadabikdadabikMatch4.1beta
OR
dadabikdadabikMatch4.1rc1
OR
dadabikdadabikMatch4.1rc2
OR
dadabikdadabikMatch4.1rc3
OR
dadabikdadabikMatch4.2
OR
dadabikdadabikMatch4.2beta
OR
dadabikdadabikMatch4.3alpha
OR
dadabikdadabikMatch4.3beta
OR
dadabikdadabikMatch4.3beta2

Related

prion 2
cvelist 2
nvd 2
cve 1
prion
prion
Cross site scripting
2010-12-01 16:06:00
Cross site scripting
2010-12-01 16:06:00
cvelist
cvelist
CVE-2010-4355
2010-12-01 16:00:00
CVE-2010-4364
2010-12-01 16:00:00
nvd
nvd
CVE-2010-4355
2010-12-01 16:06:13
CVE-2010-4364
2010-12-01 16:06:15
cve
cve
CVE-2010-4364
2010-12-01 16:06:15

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON
Related for CVE-2010-4355
prion2cvelist2nvd2cve1