CVE-2010-4966

2022-10-0316:21:05

mitre

www.cve.org

xss

atcom netvolution

search action

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.3%

JSON

Cross-site scripting (XSS) vulnerability in default.asp in ATCOM Netvolution allows remote attackers to inject arbitrary web script or HTML via the query parameter in a Search action.

References

1337day.com/exploits/13067