CVE-2010-2344

MEDIUM 4.3CVE-2010-2344 · Published 21/06/2010 · updated 16/06/2026

In short

CVE-2010-2344 is a MEDIUM (CVSS 4.3) vulnerability affecting odcms (odcms).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
odcms odcms	`= 1.06`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in odCMS 1.06, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the Page parameter to (1) _main/index.php, (2) _members/index.php, (3) _forum/index.php, (4) _docs/index.php, and (5) _announcements/index.php.

References

holisticinfosec.org/content/view/146/45
secunia.com/advisories/39942 · Vendor Advisory
osvdb.org/65258
osvdb.org/65259
osvdb.org/65260
osvdb.org/65261
osvdb.org/65262
securityfocus.com/bid/40678
exchange.xforce.ibmcloud.com/vulnerabilities/59247

More vulnerabilities in odcms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free