CVE-2010-4883

Опубликовано: 07 окт. 2011

Источник: nvd

CVSS2: 2.6

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter.

Ссылки

http://modxcms.com/forums/index.php/topic%2C55104.0.html
http://modxcms.com/forums/index.php/topic%2C55105.0.html
http://packetstormsecurity.org/1009-exploits/modx202pl-xss.txt
Exploit
http://secunia.com/advisories/41638
Vendor Advisory
http://securityreason.com/securityalert/8435
http://www.osvdb.org/68264
Exploit
http://www.securityfocus.com/bid/43577
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/62070
http://modxcms.com/forums/index.php/topic%2C55104.0.html
http://modxcms.com/forums/index.php/topic%2C55105.0.html
http://packetstormsecurity.org/1009-exploits/modx202pl-xss.txt
Exploit
http://secunia.com/advisories/41638
Vendor Advisory
http://securityreason.com/securityalert/8435
http://www.osvdb.org/68264
Exploit
http://www.securityfocus.com/bid/43577
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/62070

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:modx:revolution:2.0.2-pl:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.07767

Низкий

2.6 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-32c6-pxw7-2477

github

больше 3 лет назад