CVE-2010-2917

AJ Square AJ Article 3.0 - Cross-Site Scripting via Multiple Parameters

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-2917. PoCs published by Sid3^effects.

AI-analyzed exploit summary This is a writeup describing a persistent XSS vulnerability in AJArticle v3. The vulnerability allows attackers to inject malicious scripts into the profile section or article submission fields, which are then executed when other users view the affected pages.

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) emailid, (2) fname, (3) lname, (4) company, (5) address1, (6) address2, (7) city, (8) state, (9) zipcode, (10) phone, and (11) fax parameters in an update action. NOTE: some of these details are obtained from third party information.

Exploits (1)

exploitdb WRITEUP
by Sid3^effects · textwebappsphp
https://www.exploit-db.com/exploits/14354

This is a writeup describing a persistent XSS vulnerability in AJArticle v3. The vulnerability allows attackers to inject malicious scripts into the profile section or article submission fields, which are then executed when other users view the affected pages.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: AJArticle v3
Auth required
Prerequisites: Access to a user account with permissions to edit profile or submit articles
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/14354
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/66279
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/41576
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40560
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/60357

Scores

EPSS 0.0172
EPSS Percentile 74.5%

Details

CWE
CWE-79
Status published
Products (1)
ajsquare/aj_article 3.0
Published Jul 30, 2010
Tracked Since Feb 18, 2026