CVE-2010-4985

Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web script or HTML via vectors involving the "Enter Reference Number Below" text box.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.52% chance of exploitation in the next 30 days, 74th percentile

Published

2011-11-01

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/14325

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/14325

Security advisories

• http://www.securityfocus.com/bid/41542

References

• CVE Record
• NVD entry