CVE-2010-4783 Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_gpc is disabled, allow remote attackers to inject arbitrary web scrip...
LowCVSS 2.6
EPSS 1.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_gpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the (1) siteurl and (2) urlbanner parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpwebscripts easy banner free | = 2009.05.18 | No fix listed |
References
- evuln.com exploit
- packetstormsecurity.org exploit
- 42316 third-party-advisory vendor-advisory
- 69510 vdb-entry
- 20101126 [eVuln.com] URL XSS in Easy Banner Free mailing-list
- 45066 exploit vdb-entry