CVE-2010-4873

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• WeBid 0.85P1 - Multiple Input Validation Vulnerabilities2010-11-10 · webapps · php · Verified

Impact

Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://osvdb.org/69103
• http://packetstormsecurity.org/1011-exploits/webid085p1-xss.txt
• http://secunia.com/advisories/42171
• http://securityreason.com/securityalert/8429
• http://www.johnleitch.net/Vulnerabilities/WeBid.0.8.5P1.Reflected.Cross-site.Scripting/62
• http://www.securityfocus.com/bid/44765
• https://exchange.xforce.ibmcloud.com/vulnerabilities/63152
• http://osvdb.org/69103
• http://packetstormsecurity.org/1011-exploits/webid085p1-xss.txt
• http://secunia.com/advisories/42171
• http://securityreason.com/securityalert/8429
• http://www.johnleitch.net/Vulnerabilities/WeBid.0.8.5P1.Reflected.Cross-site.Scripting/62
• http://www.securityfocus.com/bid/44765
• https://exchange.xforce.ibmcloud.com/vulnerabilities/63152