CVEvulnerability
CVE-2010-4734
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2011-02-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0, when the Blog plugin is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Email parameters. NOTE: some of these details are obtained from third party information.
Affected configurations
• amix skeletonz cms 1.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.org/files/view/96151/skeletonzcms-xss.txt Exploit
- http://secunia.com/advisories/42385 Vendor Advisory
- http://securityreason.com/securityalert/8081 securityreason.com
- http://www.exploit-db.com/exploits/15625 Exploit
- http://www.osvdb.org/69514 www.osvdb.org
- http://www.securityfocus.com/bid/45081 Exploit
- http://packetstormsecurity.org/files/view/96151/skeletonzcms-xss.txt Exploit
- http://secunia.com/advisories/42385 Vendor Advisory
- http://securityreason.com/securityalert/8081 securityreason.com
- http://www.exploit-db.com/exploits/15625 Exploit
- http://www.osvdb.org/69514 www.osvdb.org
- http://www.securityfocus.com/bid/45081 Exploit