CVE-2010-4366

EPSS 1.5%

Multiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social Networking allow remote attackers to inject arbitrary web script or HTML via the (1) thread_title and (2) thread_description parameters in a message.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/15543unverified exploitdbwww.exploit-db.com/exploits/15543unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/42206 https://exchange.xforce.ibmcloud.com/vulnerabilities/63255 http://www.exploit-db.com/exploits/15543 http://www.osvdb.org/69359 http://www.securityfocus.com/bid/44846