CVE-2010-5007 - Cross-site scripting (XSS) vulnerability in pages/match_report.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in pages/match_report.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter

Published Nov 2, 2011

4.3

MEDIUM

CVSS 2.0

EPSS 1.72%

Description

Cross-site scripting (XSS) vulnerability in pages/match_report.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (6)

http://packetstormsecurity.org/1006-exploits/utstats-sqlxss.txt
x_refsource_MISCExploit
http://securityreason.com/securityalert/8506
third-party-advisoryx_refsource_SREASON
http://www.exploit-db.com/exploits/13854
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/40836
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2010/1465
vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/59401
vdb-entryx_refsource_XF

Link	Providers	Tags
http://packetstormsecurity.org/1006-exploits/utstats-sqlxss.txt		x_refsource_MISCExploit
http://securityreason.com/securityalert/8506		third-party-advisoryx_refsource_SREASON
http://www.exploit-db.com/exploits/13854		exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/40836		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2010/1465		vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/59401		vdb-entryx_refsource_XF