NVD

Id
13487  
Name
CVE-2010-1996  
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with certain creation privileges, to inject arbitrary web script or HTML via the (1) content parameter in conjunction with a /admin/poll/add PATH_INFO, the (2) meta parameter in conjunction with a /admin/category/add PATH_INFO, and the (3) keyword parameter in conjunction with a /admin/tag/add PATH_INFO.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-05-20  
Modified Date
2010-05-21  
Seq
2010-1996  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74503 13487 CVE-2010-1996 http://holisticinfosec.org/content/view/141/45/  View
74504 13487 CVE-2010-1996 40108  View
74505 13487 CVE-2010-1996 tomatocms-index-content-xss(58475)  View
74506 13487 CVE-2010-1996 tomatocms-index-meta-xss(58491)  View
74507 13487 CVE-2010-1996 tomatocms-index-keyword-xss(58492)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39701 JVNDB-2010-005486 TomatoCMS の index.php におけるクロスサイトスクリプティングの脆弱性 TomatoCMS の index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-1996 44576 CVE-2010-1996 13487 2.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005486.html 2010-05-20 2012-12-20 View