62665vdb entry
http://osvdb.org/62665 CVE-2010-2130
ARISg 5.0 - 'wflogin.jsp' Cross-Site Scripting
Record summary
CVE-2010-2130 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in wflogin.jsp in Aris Global ARISg 5.0 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBARISg 5.0 - 'wflogin.jsp' Cross-Site ScriptingExploitDB exploitby Yaniv MironNot analyzed1 file
References
7packetstormsecurity.org
http://packetstormsecurity.org/1002-exploits/arisg5-xss.txt 38793Third-party advisory
http://secunia.com/advisories/38793 20100226 ARISg5 (version 5.0) cross site scripting vulnerabilitymailing list
http://www.securityfocus.com/archive/1/509758/100/0/threaded 20100226 ARISg5 (Version 5.0) Cross Site Scripting Vulnerabilitymailing list
http://www.securityfocus.com/archive/1/509770/100/0/threaded 38441vdb entry
http://www.securityfocus.com/bid/38441 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2010-2130