NVD

Id
13738  
Name
CVE-2010-2260  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Gambit Design Bandwidth Meter, 0.72 and possibly 1.2, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) view_by_name.php or (2) view_by_ip.php in admin/. NOTE: some sources report that the affected product is ShaPlus Bandwidth Meter, but this is incorrect.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-06-09  
Modified Date
2010-06-10  
Seq
2010-2260  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
76446 13738 CVE-2010-2260 http://packetstormsecurity.org/1001-exploits/bandwidthmeter-xss.txt  View
76447 13738 CVE-2010-2260 bandwidthmeter-viewby-xss(55307)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38348 JVNDB-2010-004133 Gambit Design Bandwidth Meter におけるクロスサイトスクリプティングの脆弱性 Gambit Design Bandwidth Meter には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-2260 44840 CVE-2010-2260 13738 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004133.html 2010-06-09 2012-06-26 View