CVE-2010-2458: XSS

Published Jun 25, 2010

Updated

Cross-site scripting (XSS) vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the videoid parameter.

Affected Software

1 affected component

2daybiz Video Community Portal Script=1.0

Event History

Jun 25, 2010

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-2458?

CVE-2010-2458 is classified as a medium severity vulnerability due to its potential for exploitation via cross-site scripting.

How do I fix CVE-2010-2458?

To fix CVE-2010-2458, validate and sanitize user input in the videoid parameter to prevent script injection.

What software is affected by CVE-2010-2458?

CVE-2010-2458 affects version 1.0 of the 2daybiz Video Community Portal Script.

Can CVE-2010-2458 be exploited by an attacker?

Yes, an attacker can exploit CVE-2010-2458 to inject arbitrary web scripts or HTML, compromising user sessions or stealing information.

What are the potential consequences of CVE-2010-2458?

The consequences of CVE-2010-2458 include session hijacking, defacement of web pages, and distribution of malware through malicious scripts.