CVE-2010-2718

MOYENNE 4.3CVE-2010-2718 · Published 13/07/2010 · updated 16/06/2026

En bref

CVE-2010-2718 est une vulnérabilité MOYENNE (CVSS 4.3) touchant cruxpa (cruxsoftware).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.3%, plus élevée que 71.5% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
cruxpa cruxsoftware	`= 2.00`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in CruxSoftware CruxPA 2.00, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) txtusername parameter to login.php, (2) todo parameter to newtodo.php, and unspecified vectors to (3) newtelephone.php and (4) newappointment.php.

References

packetstormsecurity.org/1007-exploits/cruxpa-xss.txt · Exploit
htbridge.ch/advisory/xss_vulnerability_in_cruxpa.html · Exploit
htbridge.ch/advisory/xss_vulnerability_in_cruxpa_1.html · Exploit
htbridge.ch/advisory/xss_vulnerability_in_cruxpa_2.html · Exploit
htbridge.ch/advisory/xss_vulnerability_in_cruxpa_3.html · Exploit
securityfocus.com/archive/1/512243/100/0/threaded
securityfocus.com/bid/41495
vupen.com/english/advisories/2010/1709 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free