CVE-2010-2858: XSS
First published: Sun Jul 25 2010(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) layout and (2) sortorder parameters.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Boesch-it Simpnews | =2.42.0 | |
| Boesch-it Simpnews | =2.13 | |
| Boesch-it Simpnews | =2.30.6 | |
| Boesch-it Simpnews | =2.41.0 | |
| Boesch-it Simpnews | =2.32.1 | |
| Boesch-it Simpnews | =2.42.01 | |
| Boesch-it Simpnews | =2.33.01 | |
| Boesch-it Simpnews | =2.39.0 | |
| Boesch-it Simpnews | =2.38.03 | |
| Boesch-it Simpnews | =2.41.03 | |
| Boesch-it Simpnews | =2.34.01 | |
| Boesch-it Simpnews | =2.30 | |
| Boesch-it Simpnews | =2.47.00 | |
| Boesch-it Simpnews | =2.38.04 | |
| Boesch-it Simpnews | =2.34 | |
| Boesch-it Simpnews | =2.33.0 | |
| Boesch-it Simpnews | =2.40.01 | |
| Boesch-it Simpnews | =2.34.0 | |
| Boesch-it Simpnews | =2.36.00 | |
| Boesch-it Simpnews | =2.37.02 | |
| Boesch-it Simpnews | =2.31.0 | |
| Boesch-it Simpnews | <=2.47.03 | |
| Boesch-it Simpnews | =2.41.02 | |
| Boesch-it Simpnews | =2.37.00 | |
| Boesch-it Simpnews | =2.38 | |
| Boesch-it Simpnews | =2.44.00 | |
| Boesch-it Simpnews | =2.32.0 | |
| Boesch-it Simpnews | =2.35.00 | |
| Boesch-it Simpnews | =2.38.02 | |
| Boesch-it Simpnews | =2.0.1 | |
| Boesch-it Simpnews | =2.37.01 | |
| Boesch-it Simpnews | =2.30.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-historical
- collector/nvd-index
- vendor/boesch-it
- canonical/boesch-it simpnews
- version/boesch-it simpnews/2.42.0
- version/boesch-it simpnews/2.13
- version/boesch-it simpnews/2.30.6
- version/boesch-it simpnews/2.41.0
- version/boesch-it simpnews/2.32.1
- version/boesch-it simpnews/2.42.01
- version/boesch-it simpnews/2.33.01
- version/boesch-it simpnews/2.39.0
- version/boesch-it simpnews/2.38.03
- version/boesch-it simpnews/2.41.03
- version/boesch-it simpnews/2.34.01
- version/boesch-it simpnews/2.30
- version/boesch-it simpnews/2.47.00
- version/boesch-it simpnews/2.38.04
- version/boesch-it simpnews/2.34
- version/boesch-it simpnews/2.33.0
- version/boesch-it simpnews/2.40.01
- version/boesch-it simpnews/2.34.0
- version/boesch-it simpnews/2.36.00
- version/boesch-it simpnews/2.37.02
- version/boesch-it simpnews/2.31.0
- version/boesch-it simpnews/2.47.03
- version/boesch-it simpnews/2.41.02
- version/boesch-it simpnews/2.37.00
- version/boesch-it simpnews/2.38
- version/boesch-it simpnews/2.44.00
- version/boesch-it simpnews/2.32.0
- version/boesch-it simpnews/2.35.00
- version/boesch-it simpnews/2.38.02
- version/boesch-it simpnews/2.0.1
- version/boesch-it simpnews/2.37.01
- version/boesch-it simpnews/2.30.2