CVE-2010-4852 Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web script or HTML via the reason parameter in a fail action.
MediumCVSS 4.3
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web script or HTML via the reason parameter in a fail action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eclime | = 1.1.2b | No fix listed |
References
- packetstormsecurity.org exploit
- 8399 third-party-advisory
- 15644 exploit
- www.htbridge.ch exploit
- 45124 vdb-entry