← Zuruck zu CVEs
CVE-2010-5010
N/ABeschreibung
Cross-site scripting (XSS) vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to inject arbitrary web script or HTML via the session parameter.
CVE Details
CVSS v3.1 BewertungN/A
Veroffentlicht11/2/2011
Zuletzt geandert4/29/2026
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
schoolmation:schoolmation
Schwachen (CWE)
CWE-79
Referenzen
http://osvdb.org/65417(cve@mitre.org)
http://secunia.com/advisories/40154(cve@mitre.org)
http://securityreason.com/securityalert/8508(cve@mitre.org)
http://www.exploit-db.com/exploits/13812/(cve@mitre.org)
http://www.securityfocus.com/bid/40737(cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/59346(cve@mitre.org)
http://osvdb.org/65417(af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.org/1006-exploits/schoolmation-sqlxss.txt(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/40154(af854a3a-2127-422b-91ae-364da2661108)
http://securityreason.com/securityalert/8508(af854a3a-2127-422b-91ae-364da2661108)
http://www.exploit-db.com/exploits/13812/(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/40737(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/59346(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.