medium4.3Public exploit code
CVE-2010-3202
Cross-site scripting (XSS) vulnerability in Flock Browser 3.0.0.3989 allows remote attackers to inject arbitrary web script or HTML via a crafted bookmark.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Flock Browser 3.0.0 - Malformed Bookmark HTML Injection2010-08-19 · remote · multiple · Verified
Impact
Cross-site scripting (XSS) vulnerability in Flock Browser 3.0.0.3989 allows remote attackers to inject arbitrary web script or HTML via a crafted bookmark.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flock | Flock | Version 3.0.0.3989 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2010-09/0111.html
- http://flock.com/security/
- http://lostmon.blogspot.com/2010/08/flock-browser-3003989-malformed.html
- http://www.securityfocus.com/bid/42556
- http://archives.neohapsis.com/archives/bugtraq/2010-09/0111.html
- http://flock.com/security/
- http://lostmon.blogspot.com/2010/08/flock-browser-3003989-malformed.html
- http://www.securityfocus.com/bid/42556