CVE-2010-0617 - Cross-site scripting (XSS) vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web script or HTML via the return parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web script or HTML via the return parameter

Published Feb 11, 2010

4.3

MEDIUM

CVSS 2.0

EPSS 1.02%

Description

Cross-site scripting (XSS) vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web script or HTML via the return parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

http://secunia.com/advisories/38478
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/62179
vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/56157
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/38478		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/62179		vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/56157		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 11, 2010

Updated Aug 7, 2024

Reserved Feb 11, 2010

Link CVE-2010-0617

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2010-0617

Red Hat

Severity n/a

Public date n/a

Links CVE-2010-0617