CVE-2010-2344 Multiple cross-site scripting (XSS) vulnerabilities in odCMS 1.06, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the Page parameter to (1) _main/index.php, (2...
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in odCMS 1.06, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the Page parameter to (1) _main/index.php, (2) _members/index.php, (3) _forum/index.php, (4) _docs/index.php, and (5) _announcements/index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| odcms | = 1.06 | No fix listed |
References
- holisticinfosec.org
- 39942 third-party-advisory vendor-advisory
- 65258 vdb-entry
- 65259 vdb-entry
- 65260 vdb-entry
- 65261 vdb-entry
- 65262 vdb-entry
- 40678 vdb-entry
- odcms-page-xss(59247) vdb-entry