CVE-2010-4097 | BDVDB-2026-43843 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) mail, (2) title, (3) u, and (4) url parameters. NOTE: the q parameter is already covered by CVE-2009-2302.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/44390
http://www.securityfocus.com/archive/1/514423/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/62767

Exploit#

No public exploit known

History#

Version 12010-10-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.