Description
Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows remote attackers to inject arbitrary web script or HTML via the order parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by indoushka · textwebappsphp
https://www.exploit-db.com/exploits/34121
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/55739
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/38252
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/61827
Exploit x_refsource_misc
http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt
Scores
EPSS
0.0265
EPSS Percentile
85.8%
Details
CWE
CWE-79
Status
published
Products (2)
bitscripts/bits_video_script
2.04
bitscripts/bits_video_script
2.05 gold_beta
Published
Jan 21, 2010
Tracked Since
Feb 18, 2026