CVE-2010-1052

AudiStat 1.3 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) year and (2) mday parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploits (1)

exploitdb WORKING POC

by kaMtiEz · textwebappsphp

https://www.exploit-db.com/exploits/11334

View Code ZIP pw:eip

References (1)

[Vendor Advisory] http://secunia.com/advisories/38494

Scores

EPSS 0.0031

EPSS Percentile 54.1%

Classification

CWE

CWE-79

Status published

Affected Products (2)

alexandre_dubus/audistat

n/a/n/a

Timeline

Published Mar 23, 2010

Tracked Since Feb 18, 2026