CVE-2010-4985

Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web script or HTML via vectors involving the "Enter Reference Number Below" text box.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.52% chance of exploitation in the next 30 days, 73th percentile

Published

2011-11-01

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/14325

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/14325

References

• CVE Record
• NVD entry

Related

• CVE-2010-4984
• CVE-2010-4986
• CVE-2010-4983
• CVE-2010-4987
• CVE-2010-4982
• CVE-2010-4988