CVE-2010-2858: XSS
Published Jul 23, 2010
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) layout and (2) sortorder parameters.
Affected Software
32 affected components
Boesch-it Simpnews<=2.47.03
Boesch-it Simpnews=2.0.1
Boesch-it Simpnews=2.13
Boesch-it Simpnews=2.30
Boesch-it Simpnews=2.30.2
Boesch-it Simpnews=2.30.6
Boesch-it Simpnews=2.31.0
Boesch-it Simpnews=2.32.0
Boesch-it Simpnews=2.32.1
Boesch-it Simpnews=2.33.0
Boesch-it Simpnews=2.33.01
Boesch-it Simpnews=2.34
Boesch-it Simpnews=2.34.0
Boesch-it Simpnews=2.34.01
Boesch-it Simpnews=2.35.00
Boesch-it Simpnews=2.36.00
Boesch-it Simpnews=2.37.00
Boesch-it Simpnews=2.37.01
Boesch-it Simpnews=2.37.02
Boesch-it Simpnews=2.38
Boesch-it Simpnews=2.38.02
Boesch-it Simpnews=2.38.03
Boesch-it Simpnews=2.38.04
Boesch-it Simpnews=2.39.0
Boesch-it Simpnews=2.40.01
Boesch-it Simpnews=2.41.0
Boesch-it Simpnews=2.41.02
Boesch-it Simpnews=2.41.03
Boesch-it Simpnews=2.42.0
Boesch-it Simpnews=2.42.01
Boesch-it Simpnews=2.44.00
Boesch-it Simpnews=2.47.00
Event History
Jul 23, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-2858?
CVE-2010-2858 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2010-2858?
To fix CVE-2010-2858, upgrade to a version of SimpNews later than 2.47.03.
3
What software is affected by CVE-2010-2858?
CVE-2010-2858 affects SimpNews versions up to and including 2.47.03.
4
What types of vulnerabilities are present in CVE-2010-2858?
CVE-2010-2858 contains multiple cross-site scripting (XSS) vulnerabilities.
5
Can remote attackers exploit CVE-2010-2858?
Yes, remote attackers can exploit CVE-2010-2858 to inject arbitrary web scripts or HTML.