CVE-2010-1091

2010-03-2417:00:00

mitre

www.cve.org

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

64.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) city, (3) email, (4) state, and (5) message parameters.

References

packetstormsecurity.org/1002-exploits/phpmysite-sqlxss.txt

www.exploit-db.com/exploits/11588

www.vupen.com/english/advisories/2010/0492

exchange.xforce.ibmcloud.com/vulnerabilities/56574