CVE-2010-3208 Cross-site scripting (XSS) vulnerability in ajax.php in Wiccle Web Builder (WWB) 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the post_text parameter in a site cus...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in ajax.php in Wiccle Web Builder (WWB) 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the post_text parameter in a site custom_search action to index.php. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wiccle web builder | = 1.00 | No fix listed |
| wiccle web builder | = 1.0.1 | No fix listed |
References
- 67691 vdb-entry
- 41191 third-party-advisory vendor-advisory
- www.packetstormsecurity.com exploit
- wicclewebbuilder-posttext-xss(61466) vdb-entry