CVE-2010-2003

The CVE-2010-2003 issue affects Advanced Poll 2.08, specifically the misc/get_admin.php script. A sanitation flaw in the mysql_host parameter enables cross-site scripting (XSS), allowing an attacker to inject arbitrary HTML/JavaScript into a victim’s browser. Exploitation details in HTBridge advi...

Cross-site Scripting (XSS) Vulnerability in Advanced Poll

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Advanced Poll which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in Advanced Poll: CVE-2010-2003 An input sanitation error was found in the "mysqlhost" parameter in...