CVE

Id
46859  
CVE No.
CVE-2010-4275  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) name or (2) descr parameter in an (a) update_usergroup or a (b) store_nas action to admin.php.  
Phase
Assigned (20101117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
512266 46859 CVE-2010-4275 EXPLOIT-DB:15766  View
512267 46859 CVE-2010-4275 URL:http://www.exploit-db.com/exploits/15766  View
512268 46859 CVE-2010-4275 BID:45481  View
512269 46859 CVE-2010-4275 URL:http://www.securityfocus.com/bid/45481  View
512270 46859 CVE-2010-4275 SECUNIA:42364  View
512271 46859 CVE-2010-4275 URL:http://secunia.com/advisories/42364  View
512272 46859 CVE-2010-4275 XF:radiusmanager-admin-xss(64199)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37627 JVNDB-2010-003412 Pandora FMS のディフォルト設定における認証を回避される脆弱性 Pandora FMS のディフォルト設定は、loginhash_pwd フィールドの空の文字列を特定するため、認証を回避される脆弱性が存在します。 CVE-2010-4279 46859 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003412.html  View