CVE-2010-4275

Radius Manager 3.8.0 - Multiple Cross-Site Scripting Vulnerabilities

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2010-4275 has a selected CVSS score of 3.5; EIP currently links 2 catalogued exploits.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) name or (2) descr parameter in an (a) update_usergroup or a (b) store_nas action to admin.php.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
2

Proofs of concept

2

Catalogued exploits

ExploitDBRadius Manager 3.8.0 - Multiple Cross-Site Scripting VulnerabilitiesExploitDB exploitby Rodrigo Rubira BrancoNot analyzed1 file
ExploitDB
PoC details
ExploitDBRadius Manager 3.6 - Multiple Cross-Site Scripting VulnerabilitiesExploitDB exploitby Rodrigo Rubira BrancoNot analyzed1 file
ExploitDB
PoC details

References

5