low2.1Public exploit code
CVE-2010-1997
Cross-site scripting (XSS) vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "Article list" edit privileges, to injec…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Saurus CMS 4.7 - 'edit.php' Cross-Site Scripting2010-05-11 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "Article list" edit privileges, to inject arbitrary web script or HTML via the pealkiri parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Saurus | Saurus Cms | Version 4.7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/64570
- http://packetstormsecurity.org/1005-exploits/sauruscms-xss.txt
- http://secunia.com/advisories/39773
- http://www.htbridge.ch/advisory/xss_in_saurus_cms.html
- http://www.securityfocus.com/archive/1/511223/100/0/threaded
- http://www.securityfocus.com/bid/40059
- http://osvdb.org/64570
- http://packetstormsecurity.org/1005-exploits/sauruscms-xss.txt
- http://secunia.com/advisories/39773
- http://www.htbridge.ch/advisory/xss_in_saurus_cms.html
- http://www.securityfocus.com/archive/1/511223/100/0/threaded
- http://www.securityfocus.com/bid/40059