packetstormsecurity.org
http://packetstormsecurity.org/files/view/96151/skeletonzcms-xss.txt CVE-2010-4734
Skeletonz CMS - Persistent Cross-Site Scripting
Record summary
CVE-2010-4734 has a selected CVSS score of 2.6; EIP currently links 1 catalogued exploit.
Description
Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0, when the Blog plugin is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Email parameters. NOTE: some of these details are obtained from third party information.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSkeletonz CMS - Persistent Cross-Site ScriptingExploitDB exploitby JbyteNot analyzed1 file
References
742385Third-party advisory
http://secunia.com/advisories/42385 8081Third-party advisory
http://securityreason.com/securityalert/8081 15625exploit
http://www.exploit-db.com/exploits/15625 69514vdb entry
http://www.osvdb.org/69514 45081vdb entry
http://www.securityfocus.com/bid/45081 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2010-4734