CVE-2010-1105

AdvertisementManager <3.6 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in cgi/index.php in AdvertisementManager 3.1.0 and 3.6 allows remote attackers to inject arbitrary web script or HTML via the usr parameter.

References (5)

[Vendor Advisory] http://secunia.com/advisories/38243

[Exploit] http://www.packetstormsecurity.com/1001-exploits/advertisemanager-xssrfitraversal.txt

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/40151

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/55754

[Third Party Advisory, VDB Entry] http://osvdb.org/61846

Scores

EPSS 0.0033

EPSS Percentile 55.5%

Classification

CWE

CWE-79

Status published

Affected Products (3)

advertisementmanager/advertisementmanager

n/a/n/a

Timeline

Published Mar 25, 2010

Tracked Since Feb 18, 2026