4.3
CVSSv2

CVE-2010-2675

Published: 08/07/2010 Updated: 16/07/2010
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote malicious users to inject arbitrary web script or HTML via the id parameter in an articolo action.

Vulnerable Product Search on Vulmon Subscribe to Product

alanzard tsoka\\ cms

Exploits

[~]----------------------------------------------------------------------------------------------------------------------- [~] TSOKA:CMS v11 , v19 AND v20 SQL Injection & XSS Vulnerability [~] [~] wwwalanzardcom (from italy) [~] [~] [~] ------------------------------------------------------------------------------------------------- ...