CVE-2010-5002

Опубликовано: 01 нояб. 2011

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote attackers to inject arbitrary web script or HTML via the u parameter.

Ссылки

http://packetstormsecurity.org/1007-exploits/exponentcms-xss.txt
Vendor Advisory
http://secunia.com/advisories/36703
Vendor Advisory
http://securityreason.com/securityalert/8485
http://www.securityfocus.com/archive/1/512224/100/0/threaded
http://www.securityfocus.com/bid/41447
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/60168
http://packetstormsecurity.org/1007-exploits/exponentcms-xss.txt
Vendor Advisory
http://secunia.com/advisories/36703
Vendor Advisory
http://securityreason.com/securityalert/8485
http://www.securityfocus.com/archive/1/512224/100/0/threaded
http://www.securityfocus.com/bid/41447
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/60168

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:exponentcms:exponent_cms:0.97.0:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06528

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-vx7j-xjrp-5gjh

github

больше 3 лет назад