CVE-2010-4863

Опубликовано: 05 окт. 2011

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter.

Ссылки

http://packetstormsecurity.org/1009-exploits/getsimplecms201-xss.txt
Exploit
http://securityreason.com/securityalert/8420
http://www.htbridge.ch/advisory/xss_vulnerability_in_getsimple_cms_1.html
Exploit
http://www.securityfocus.com/archive/1/514043/100/0/threaded
http://www.securityfocus.com/bid/43593
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/62177
http://packetstormsecurity.org/1009-exploits/getsimplecms201-xss.txt
Exploit
http://securityreason.com/securityalert/8420
http://www.htbridge.ch/advisory/xss_vulnerability_in_getsimple_cms_1.html
Exploit
http://www.securityfocus.com/archive/1/514043/100/0/threaded
http://www.securityfocus.com/bid/43593
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/62177

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:get-simple:getsimple_cms:2.01:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03336

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-xrgp-m4m8-gq98

github

около 4 лет назад