medium4.3Public exploit code
CVE-2010-4513
Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zimplit CMS - 'English_manual_version_2.php?client' Cross-Site Scripting2010-12-07 · webapps · php · Verified
- Zimplit CMS - 'zimplit.php?File' Cross-Site Scripting2010-12-07 · webapps · php · Verified
- Zimplit CMS 3.0 - Multiple Vulnerabilities2013-09-13 · webapps · php · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter in a load action to zimplit.php and (2) client parameter to English_manual_version_2.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zimplit | Zimplit Cms | through 3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=129182251500541&w=2
- http://packetstormsecurity.org/files/view/96466/zimplit-xss.txt
- http://secunia.com/advisories/41629
- http://www.htbridge.ch/advisory/xss_vulnerability_in_zimplit_cms.html
- http://www.htbridge.ch/advisory/xss_vulnerability_in_zimplit_cms_1.html
- http://www.securityfocus.com/archive/1/515078/100/0/threaded
- http://www.securityfocus.com/bid/45252
- http://marc.info/?l=bugtraq&m=129182251500541&w=2
- http://packetstormsecurity.org/files/view/96466/zimplit-xss.txt
- http://secunia.com/advisories/41629
- http://www.htbridge.ch/advisory/xss_vulnerability_in_zimplit_cms.html
- http://www.htbridge.ch/advisory/xss_vulnerability_in_zimplit_cms_1.html
- http://www.securityfocus.com/archive/1/515078/100/0/threaded
- http://www.securityfocus.com/bid/45252