CVE-2010-2509

Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject arbitrary web script or HTML via the (1) keyword parameter to category.php and the (2) password parameter to memberlogin.php.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.31% chance of exploitation in the next 30 days, 69th percentile

Published

2010-06-28

Updated

2024-09-17

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/14020

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/14020

References

• CVE Record
• NVD entry

Related

• CVE-2010-2508
• CVE-2010-2510
• CVE-2010-2507
• CVE-2010-2511
• CVE-2010-2505
• CVE-2010-2512