CVE-2010-4749
BLOG:CMS 4.2.1.e - Cross-Site Scripting via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-4749. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in BLOG:CMS 4.2.1.e, including CSRF and XSS. It provides PoC code for CSRF attacks to modify user settings and XSS via unsanitized input in 'body', 'amount', and 'action' variables.
Description
Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1.e, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) body parameter to action.php and the (2) amount and (3) action parameters to admin/index.php.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in BLOG:CMS 4.2.1.e, including CSRF and XSS. It provides PoC code for CSRF attacks to modify user settings and XSS via unsanitized input in 'body', 'amount', and 'action' variables.