CVE-2010-4873 - Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary web script or HTML via the id parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary web script or HTML via the id parameter

Published Oct 7, 2011

4.3

MEDIUM

CVSS 2.0

EPSS 1.78%

Description

Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (7)

http://osvdb.org/69103
vdb-entryx_refsource_OSVDBExploit
http://packetstormsecurity.org/1011-exploits/webid085p1-xss.txt
x_refsource_MISCExploit
http://secunia.com/advisories/42171
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/8429
third-party-advisoryx_refsource_SREASON
http://www.johnleitch.net/Vulnerabilities/WeBid.0.8.5P1.Reflected.Cross-site.Scripting/62
x_refsource_MISCExploit
http://www.securityfocus.com/bid/44765
vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/63152
vdb-entryx_refsource_XF

Link	Providers	Tags
http://osvdb.org/69103		vdb-entryx_refsource_OSVDBExploit
http://packetstormsecurity.org/1011-exploits/webid085p1-xss.txt		x_refsource_MISCExploit
http://secunia.com/advisories/42171		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/8429		third-party-advisoryx_refsource_SREASON
http://www.johnleitch.net/Vulnerabilities/WeBid.0.8.5P1.Reflected.Cross-site.Scripting/62		x_refsource_MISCExploit
http://www.securityfocus.com/bid/44765		vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/63152		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 7, 2011

Updated Aug 7, 2024

Reserved Oct 7, 2011

Link CVE-2010-4873

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2010-4873

Red Hat

Severity n/a

Public date n/a

Links CVE-2010-4873