CVEvulnerability
CVE-2010-1091
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-03-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) city, (3) email, (4) state, and (5) message parameters.
Affected configurations
• phpmysite phpmysite
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.org/1002-exploits/phpmysite-sqlxss.txt Exploit
- http://www.exploit-db.com/exploits/11588 Exploit
- http://www.vupen.com/english/advisories/2010/0492 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56574 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.org/1002-exploits/phpmysite-sqlxss.txt Exploit
- http://www.exploit-db.com/exploits/11588 Exploit
- http://www.vupen.com/english/advisories/2010/0492 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56574 exchange.xforce.ibmcloud.com