← Zuruck zu CVEs
CVE-2010-1996
N/ABeschreibung
Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with certain creation privileges, to inject arbitrary web script or HTML via the (1) content parameter in conjunction with a /admin/poll/add PATH_INFO, the (2) meta parameter in conjunction with a /admin/category/add PATH_INFO, and the (3) keyword parameter in conjunction with a /admin/tag/add PATH_INFO.
CVE Details
CVSS v3.1 BewertungN/A
Veroffentlicht5/20/2010
Zuletzt geandert4/11/2025
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
tomatocms:tomatocms
Schwachen (CWE)
CWE-79
Referenzen
http://holisticinfosec.org/content/view/141/45/(cve@mitre.org)
http://osvdb.org/64552(cve@mitre.org)
http://osvdb.org/64553(cve@mitre.org)
http://osvdb.org/64554(cve@mitre.org)
http://secunia.com/advisories/39320(cve@mitre.org)
http://www.securityfocus.com/bid/40108(cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/58475(cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/58491(cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/58492(cve@mitre.org)
http://holisticinfosec.org/content/view/141/45/(af854a3a-2127-422b-91ae-364da2661108)
http://osvdb.org/64552(af854a3a-2127-422b-91ae-364da2661108)
http://osvdb.org/64553(af854a3a-2127-422b-91ae-364da2661108)
http://osvdb.org/64554(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/39320(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/40108(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/58475(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/58491(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/58492(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.