CVE-2010-1703: XSS
Published May 4, 2010
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in indexsearch.php in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to inject arbitrary web script or HTML via the (1) category parameter or (2) search field.
Affected Software
1 affected component
2daybiz Polls Script
Event History
May 4, 2010
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·04:00 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1703?
CVE-2010-1703 has a moderate severity level due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2010-1703?
To fix CVE-2010-1703, sanitize and validate user inputs in the category parameter and search field in index_search.php.
3
Who is affected by CVE-2010-1703?
Users of the 2daybiz Polls Script are affected by CVE-2010-1703 if they have not applied necessary security measures.
4
What type of vulnerability is CVE-2010-1703?
CVE-2010-1703 is classified as a cross-site scripting (XSS) vulnerability.
5
Can CVE-2010-1703 be exploited remotely?
Yes, CVE-2010-1703 can be exploited remotely by attackers to inject malicious scripts.