Lucene search

K

CVE-2010-10008 simplesamlphp simplesamlphp-module-openidprovider trust.tpl.php cross site scripting

🗓️ 17 Jan 2023 07:29:35Reported by VulDBType 
cvelist
 cvelist
🔗 www.cve.org👁 7 Views

A cross site scripting vulnerability in simplesamlphp-module-openidprovider trust.tpl.php allows remote attackers to manipulate StateID argument, affecting up to 0.8.x before 0.9.

Show more
Related
Affected
Refs
[
  {
    "vendor": "simplesamlphp",
    "product": "simplesamlphp-module-openidprovider",
    "versions": [
      {
        "version": "0.1",
        "status": "affected"
      },
      {
        "version": "0.2",
        "status": "affected"
      },
      {
        "version": "0.3",
        "status": "affected"
      },
      {
        "version": "0.4",
        "status": "affected"
      },
      {
        "version": "0.5",
        "status": "affected"
      },
      {
        "version": "0.6",
        "status": "affected"
      },
      {
        "version": "0.7",
        "status": "affected"
      },
      {
        "version": "0.8",
        "status": "affected"
      }
    ]
  }
]

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
17 Jan 2023 07:35Current
5.2Medium risk
Vulners AI Score5.2
CVSS24
CVSS33.5
EPSS0.00195
7
.json
Report