Expinion.Net Member Management System 'REF_URL' Parameter Cross-Site Scripting Vulnerability

The host is running Member Management System and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmembermanagementsystemxssvuln.nasl 5750 2017-03-28 14:10:17Z cfi $ Expinion.Net Member Management System 'REFURL' Parameter Cross-Site Scripting Vulnerability Authors...

CVE-2010-4896

CVE-2010-4896 is a documented cross-site scripting (XSS) vulnerability in the Admin/index.asp page of Expinion.Net Member Management System 4.0 . The issue arises from the REF_URL parameter , enabling remote attackers to inject arbitrary web script or HTML. Multiple security feeds (OpenVAS entrie...