CVE-2010-2258

2010-06-0920:00:00

mitre

www.cve.org

cross-site scripting

phpbannerexchange

arabic

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

57.2%

JSON

Cross-site scripting (XSS) vulnerability in signupconfirm.php in phpBannerExchange 1.2 Arabic allows remote attackers to inject arbitrary web script or HTML via the bannerurl parameter.

References

osvdb.org/61446

packetstormsecurity.org/1001-exploits/phpbannerexchange-xss.txt

secunia.com/advisories/38022