CVE-2010-4275

Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) name or (2) descr parameter in an (a) update_usergroup or a (b) store_nas action to admin.php.

CVSS v2.0 NVD

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

1.27% chance of exploitation in the next 30 days, 69th percentile

Published

2010-12-22

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/15766

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/35120
• https://www.exploit-db.com/exploits/15766

Security advisories

• http://secunia.com/advisories/42364
• http://www.securityfocus.com/bid/45481

References

• CVE Record
• NVD entry