CVE-2010-4966

ATCOM Netvolution - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in default.asp in ATCOM Netvolution allows remote attackers to inject arbitrary web script or HTML via the query parameter in a Search action.

References (1)

[Exploit] http://1337day.com/exploits/13067

Scores

EPSS 0.0022

EPSS Percentile 45.0%

Classification

CWE

CWE-79

Status published

Affected Products (2)

atcom/netvolution

n/a/n/a

Timeline

Published Oct 21, 2011

Tracked Since Feb 18, 2026