CVE-2010-4895 Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the username field). NOTE: s...
MediumCVSS 4.3
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the username field). NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chillycms | = 1.1.3 | No fix listed |
References
- packetstormsecurity.org
- 41313 third-party-advisory vendor-advisory
- 8437 third-party-advisory
- www.bugreport.ir
- 14897 exploit
- 67835 vdb-entry
- 42991 vdb-entry
- ADV-2010-2298 vdb-entry
- chillycms-show-xss(61607) vdb-entry