CVE-2010-2509

2022-10-0316:21:06

mitre

www.cve.org

cross-site scripting

remote attackers

web script

html

web template software

AI Score

Confidence

High

EPSS

0.001

Percentile

48.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject arbitrary web script or HTML via the (1) keyword parameter to category.php and the (2) password parameter to memberlogin.php.

References

secunia.com/advisories/40348

www.exploit-db.com/exploits/14020