CVE-2010-1655

CVE-2010-1655 affects PowerEasy 2006 and PowerEasy SiteWeaver 6.8 via a cross-site scripting flaw in User/User_ChkLogin.asp, exploitable through the ComeUrl parameter to inject arbitrary script/HTML. The NVD entry lists a CVSSv2 base score of 4.3 (Medium) with network attack vector, requiring use...