CVE

Id
47097  
CVE No.
CVE-2010-4513  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter in a load action to zimplit.php and (2) client parameter to English_manual_version_2.php.  
Phase
Assigned (20101209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
515020 47097 CVE-2010-4513 BUGTRAQ:20101207 XSS vulnerability in Zimplit CMS  View
515021 47097 CVE-2010-4513 URL:http://www.securityfocus.com/archive/1/archive/1/515078/100/0/threaded  View
515022 47097 CVE-2010-4513 BUGTRAQ:20101207 XSS vulnerability in Zimplit CMS  View
515023 47097 CVE-2010-4513 URL:http://marc.info/?l=bugtraq&m=129182251500541&w=2  View
515024 47097 CVE-2010-4513 MISC:http://packetstormsecurity.org/files/view/96466/zimplit-xss.txt  View
515025 47097 CVE-2010-4513 MISC:http://www.htbridge.ch/advisory/xss_vulnerability_in_zimplit_cms.html  View
515026 47097 CVE-2010-4513 MISC:http://www.htbridge.ch/advisory/xss_vulnerability_in_zimplit_cms_1.html  View
515027 47097 CVE-2010-4513 BID:45252  View
515028 47097 CVE-2010-4513 URL:http://www.securityfocus.com/bid/45252  View
515029 47097 CVE-2010-4513 SECUNIA:41629  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37712 JVNDB-2010-003497 Joomla! の JExtensions JE Auto (com_jeauto) コンポーネントにおける SQL インジェクションの脆弱性 Joomla! の JExtensions JE Auto (com_jeauto) コンポーネントは、magic_quotes_gpc が無効にされる際、SQL インジェクションの脆弱性が存在します。 CVE-2010-4517 47097 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003497.html  View