CVEvulnerability
CVE-2010-4985
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-11-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web script or HTML via vectors involving the "Enter Reference Number Below" text box.
Affected configurations
• mykazaam notes management system
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.org/1007-exploits/mykazaamnms-sqlxss.txt Exploit
- http://securityreason.com/securityalert/8494 securityreason.com
- http://www.exploit-db.com/exploits/14325 Exploit
- http://www.securityfocus.com/bid/41542 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60253 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.org/1007-exploits/mykazaamnms-sqlxss.txt Exploit
- http://securityreason.com/securityalert/8494 securityreason.com
- http://www.exploit-db.com/exploits/14325 Exploit
- http://www.securityfocus.com/bid/41542 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60253 exchange.xforce.ibmcloud.com