CVE-2010-4155

MEDIO 4.3CVE-2010-4155 · Published 03/11/2010 · updated 16/06/2026

En resumen

CVE-2010-4155 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a exv2 (exv2).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 64.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
exv2 exv2	`= 2.10`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the (1) rssfeedURL parameter to manual/caferss/example.php and the sumb parameter to (2) modules/news/archive.php, (3) modules/news/topics.php, and (4) modules/contact/index.php, different vectors than CVE-2007-1965.

References

packetstormsecurity.com/1010-exploits/exv2-xss.txt · Exploit
securityfocus.com/bid/44169 · Exploit
zeroscience.mk/en/vulnerabilities/ZSL-2010-4970.php · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/62630

Más vulnerabilidades de exv2

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free