Lucene search

MitreCVE-2010-4863

HistoryOct 05, 2011 - 10:55 a.m.

CVE-2010-4863

2011-10-0510:55:07

CWE-79

mitre

web.nvd.nist.gov

cve-2010-4863

xss

vulnerability

getsimple cms 2.01

cross-site scripting

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.007

Percentile

79.9%

JSON

Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter.

Affected configurations

Nvd

Node

get-simplegetsimple_cmsMatch2.01

VendorProductVersionCPE
get-simplegetsimple_cms2.01cpe:2.3:a:get-simple:getsimple_cms:2.01:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
get-simple	getsimple_cms	2.01	cpe:2.3:a:get-simple:getsimple_cms:2.01:::::::*

References

packetstormsecurity.org/1009-exploits/getsimplecms201-xss.txt

securityreason.com/securityalert/8420

www.htbridge.ch/advisory/xss_vulnerability_in_getsimple_cms_1.html

www.securityfocus.com/archive/1/514043/100/0/threaded

www.securityfocus.com/bid/43593

exchange.xforce.ibmcloud.com/vulnerabilities/62177

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.007

Percentile

79.9%

JSON

Related for CVE-2010-4863