CVE-2010-1072

2010-03-2318:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.6%

JSON

Cross-site scripting (XSS) vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary web script or HTML via the q parameter.

References

greyhathackers.wordpress.com/2010/01/07/sniggabo-cms-v2-21-xss-vulnerability/

packetstormsecurity.org/1001-exploits/sniggabocms-xss.txt

secunia.com/advisories/38029

www.exploit-db.com/exploits/11049

exchange.xforce.ibmcloud.com/vulnerabilities/55472