CVE-2010-4848 Multiple cross-site scripting (XSS) vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) url or (2) title parameter.
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) url or (2) title parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| axscripts axslinks | = 0.3 | No fix listed |
References
- evuln.com exploit
- packetstormsecurity.org exploit
- 20101117 [eVuln.com] URL and Title XSS in AxsLinks mailing-list
- 44979 vdb-entry
- axslinks-addlink-xss(63411) vdb-entry