CVE-2010-4873

2011-10-0710:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.053 Low

EPSS

Percentile

93.1%

JSON

Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

References

osvdb.org/69103

packetstormsecurity.org/1011-exploits/webid085p1-xss.txt

secunia.com/advisories/42171

securityreason.com/securityalert/8429

www.johnleitch.net/Vulnerabilities/WeBid.0.8.5P1.Reflected.Cross-site.Scripting/62

www.securityfocus.com/bid/44765

exchange.xforce.ibmcloud.com/vulnerabilities/63152