CVE-2010-2917 Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to inject arbitrary web
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2010-2917?
CVE-2010-2917 is a medium-severity vulnerability in n/a, published on 30 Jul 2010.
Official description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) emailid, (2) fname, (3) lname, (4) company, (5) address1, (6) address2, (7) city, (8) state, (9) zipcode, (10) phone, and (11) fax parameters in an update action. NOTE: some of these details are obtained from third party information.
Weakness: CWE-79
Which versions are affected by CVE-2010-2917?
It affects 1 product.
Products include Ajsquare Aj Article.
How do I fix CVE-2010-2917?
No fix has been published for CVE-2010-2917 yet. Limit exposure of the affected software until one is available.
Is CVE-2010-2917 being exploited?
There is no known exploitation of CVE-2010-2917 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-7w2g-gjg9-qhmc.