4.3
CVSSv2

CVE-2010-2509

Published: 28/06/2010 Updated: 29/06/2010
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote malicious users to inject arbitrary web script or HTML via the (1) keyword parameter to category.php and the (2) password parameter to memberlogin.php.

Vulnerable Product Search on Vulmon Subscribe to Product

2daybiz web template software

Exploits

$------------------------------------------------------------------------------------------------------------------- $ 2daybiz - The Web Template Software SQL injection and XSS vulnerability $ Author : Sangteamtham $ Home : Hcegroupnet $ Download :www2daybizcom/webtemplatesoftwarehtml $ Date :06/24/2010 $ Email :sangteamtham@gmailcom $ ...