CVEvulnerability
CVE-2010-0365
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-01-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows remote attackers to inject arbitrary web script or HTML via the order parameter.
Affected configurations
• bitscripts bits video script 2.04
• bitscripts bits video script 2.05
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/61827 osvdb.org
- http://secunia.com/advisories/38252 Vendor Advisory
- http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55739 exchange.xforce.ibmcloud.com
- http://osvdb.org/61827 osvdb.org
- http://secunia.com/advisories/38252 Vendor Advisory
- http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55739 exchange.xforce.ibmcloud.com