CVE-2010-3418

NetArt Media Car Portal is affected by multiple stored/reflected XSS vulnerabilities affecting version 2.0 and earlier. The issue arises in two parameters: (1) car_id in index.php and (2) y in include/images.php, enabling remote attackers to inject arbitrary script/HTML. CVSS base score 4.3 (MEDI...