CVE-2010-3202

Flock Browser 3.0.0.3989 - Cross-Site Scripting via Crafted Bookmark

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-3202. PoCs published by Lostmon.

AI-analyzed exploit summary This exploit demonstrates an HTML injection vulnerability in Flock Browser by embedding a malicious script within a bookmark file. The script executes in the context of the browser, potentially leading to credential theft or other client-side attacks.

Description

Cross-site scripting (XSS) vulnerability in Flock Browser 3.0.0.3989 allows remote attackers to inject arbitrary web script or HTML via a crafted bookmark.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Lostmon · htmlremotemultiple
https://www.exploit-db.com/exploits/34500

This exploit demonstrates an HTML injection vulnerability in Flock Browser by embedding a malicious script within a bookmark file. The script executes in the context of the browser, potentially leading to credential theft or other client-side attacks.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: Flock Browser < 3.0.0.4094
No auth needed
Prerequisites: User interaction to import or open the malicious bookmark file
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Various Sources x_refsource_confirm
http://flock.com/security/
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/42556
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2010-09/0111.html

Scores

EPSS 0.0147
EPSS Percentile 70.4%

Details

CWE
CWE-79
Status published
Products (1)
flock/flock 3.0.0.3989
Published Sep 13, 2010
Tracked Since Feb 18, 2026