CVE-2010-2509
2daybiz Web Template Software - XSS
Title source: ruleDescription
Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject arbitrary web script or HTML via the (1) keyword parameter to category.php and the (2) password parameter to memberlogin.php.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Sangteamtham · textwebappsphp
https://www.exploit-db.com/exploits/14020
Scores
EPSS
0.0031
EPSS Percentile
54.1%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
2daybiz/web_template_software
n/a/n/a
Timeline
Published
Jun 28, 2010
Tracked Since
Feb 18, 2026