CVE-2010-2852: XSS
Cross-site scripting (XSS) vulnerability in modules/headlines/magpierss/scripts/magpiedebug.php in RunCms 2.1, when the Headlines module is enabled, allows remote attackers to inject arbitrary web script or HTML via the url parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2852?
CVE-2010-2852 is classified as a medium-severity cross-site scripting vulnerability.
How do I fix CVE-2010-2852?
To fix CVE-2010-2852, ensure that the Headlines module in RunCms 2.1 is disabled or apply suitable input validation and encoding to the url parameter.
Who is affected by CVE-2010-2852?
CVE-2010-2852 affects users of RunCms version 2.1 when the Headlines module is enabled.
What type of vulnerability is CVE-2010-2852?
CVE-2010-2852 is a cross-site scripting (XSS) vulnerability that allows for the injection of arbitrary web scripts or HTML.
Can CVE-2010-2852 be exploited remotely?
Yes, CVE-2010-2852 can be exploited remotely by attackers who can manipulate the url parameter.