Published: 09/12/2010 Updated: 10/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 445

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote malicious users to inject arbitrary web script or HTML via the (1) file parameter in a load action to zimplit.php and (2) client parameter to English_manual_version_2.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
zimplit zimplit cms

################################################################################################################################### # Exploit Title: Zimplit CMS multiple vulnerabilities # Date: 2013 13 September # Exploit Author: Yashar shahinzadeh # Special thanks to Mormoroth # Credit goes for: y-shahinzadehir & hackerir # Vendor Ho ...

source: wwwsecurityfocuscom/bid/45252/info Zimplit CMS is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may let the att ...

source: wwwsecurityfocuscom/bid/45252/info Zimplit CMS is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may let the a ...

CWE-79 http://www.htbridge.ch/advisory/xss_vulnerability_in_zimplit_cms.html http://packetstormsecurity.org/files/view/96466/zimplit-xss.txt http://www.htbridge.ch/advisory/xss_vulnerability_in_zimplit_cms_1.html http://www.securityfocus.com/bid/45252 http://secunia.com/advisories/41629 http://marc.info/?l=bugtraq&m=129182251500541&w=2 http://www.securityfocus.com/archive/1/515078/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/28272/

CVE-2010-4513

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect