CVEvulnerability
CVE-2010-4275
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-12-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) name or (2) descr parameter in an (a) update_usergroup or a (b) store_nas action to admin.php.
Affected configurations
• dmasoftlab radius manager 3.8.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/42364 Vendor Advisory
- http://www.exploit-db.com/exploits/15766 www.exploit-db.com
- http://www.securityfocus.com/bid/45481 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64199 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/42364 Vendor Advisory
- http://www.exploit-db.com/exploits/15766 www.exploit-db.com
- http://www.securityfocus.com/bid/45481 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64199 exchange.xforce.ibmcloud.com