CVE-2010-2256

Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/memberviewdetails.php and the (2) model parameter to videos.php.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.45% chance of exploitation in the next 30 days, 72th percentile

Published

2010-06-09

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/10983

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/10983

References

• CVE Record
• NVD entry

Related

• CVE-2010-2255
• CVE-2010-2257
• CVE-2010-2254
• CVE-2010-2259
• CVE-2010-2246
• CVE-2010-2260