CVE

Id
45302  
CVE No.
CVE-2010-2718  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in CruxSoftware CruxPA 2.00, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) txtusername parameter to login.php, (2) todo parameter to newtodo.php, and unspecified vectors to (3) newtelephone.php and (4) newappointment.php.  
Phase
Assigned (20100713)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
493618 45302 CVE-2010-2718 BUGTRAQ:20100708 XSS vulnerability in CruxPA  View
493619 45302 CVE-2010-2718 URL:http://www.securityfocus.com/archive/1/archive/1/512243/100/0/threaded  View
493620 45302 CVE-2010-2718 MISC:http://packetstormsecurity.org/1007-exploits/cruxpa-xss.txt  View
493621 45302 CVE-2010-2718 MISC:http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa.html  View
493622 45302 CVE-2010-2718 MISC:http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_1.html  View
493623 45302 CVE-2010-2718 MISC:http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_2.html  View
493624 45302 CVE-2010-2718 MISC:http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_3.html  View
493625 45302 CVE-2010-2718 BID:41495  View
493626 45302 CVE-2010-2718 URL:http://www.securityfocus.com/bid/41495  View
493627 45302 CVE-2010-2718 VUPEN:ADV-2010-1709  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39808 JVNDB-2010-005593 RightInPoint Lyrics Script の index.php におけるクロスサイトスクリプティングの脆弱性 RightInPoint Lyrics Script の index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-2722 45302 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005593.html  View