Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2010-2265

Published: 15/06/2010 Updated: 26/02/2019
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Microsoft

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote malicious users to inject arbitrary web script or HTML via the svr parameter to sysinfo/sysinfomain.htm. NOTE: this can be leveraged with CVE-2010-1885 to execute arbitrary commands without user interaction.

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows 2003 server

microsoft windows xp

microsoft windows xp -

microsoft windows server 2003

Exploits

Exploit DB: Microsoft Help and Support Center - '/sysinfo/sysinfomain.htm' Cross-Site Scripting
source: wwwsecurityfocuscom/bid/40721/info Help and Support Center is prone to a cross-site scripting weakness because it fails to properly sanitize user-supplied input An attacker may leverage this issue to execute arbitrary script code in the privileged zone of the browser of an unsuspecting user NOTE: This issue is a weakness becau ...

References

CWE-79http://blogs.technet.com/b/srd/archive/2010/06/10/help-and-support-center-vulnerability-full-disclosure-posting.aspxhttp://www.kb.cert.org/vuls/id/578319http://secunia.com/advisories/40076http://www.securityfocus.com/bid/40721http://blogs.technet.com/b/msrc/archive/2010/06/10/windows-help-vulnerability-disclosure.aspxhttp://archives.neohapsis.com/archives/fulldisclosure/2010-06/0197.htmlhttp://www.vupen.com/english/advisories/2010/1417http://www.microsoft.com/technet/security/advisory/2219475.mspxhttps://exchange.xforce.ibmcloud.com/vulnerabilities/59267http://www.securityfocus.com/archive/1/511774/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/34126/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook