CVE-2010-1105

CVE-2010-1105

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in cgi/index.php in AdvertisementManager 3.1.0 and 3.6 allows remote attackers to inject arbitrary web script or HTML via the usr parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/61846 http://secunia.com/advisories/38243 https://exchange.xforce.ibmcloud.com/vulnerabilities/55754 http://www.packetstormsecurity.com/1001-exploits/advertisemanager-xssrfitraversal.txt http://www.securityfocus.com/bid/40151