CVEvulnerability
CVE-2010-2256
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-06-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/memberviewdetails.php and the (2) model parameter to videos.php.
Affected configurations
• payperviewvideosoftware pay per minute video chat script 2.0
• payperviewvideosoftware pay per minute video chat script 2.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.org/1001-exploits/ppmvcs-sqlxss.txt Exploit
- http://secunia.com/advisories/38086 Vendor Advisory
- http://www.exploit-db.com/exploits/10983 Exploit
- http://packetstormsecurity.org/1001-exploits/ppmvcs-sqlxss.txt Exploit
- http://secunia.com/advisories/38086 Vendor Advisory
- http://www.exploit-db.com/exploits/10983 Exploit