CVE-2010-2858
25.07.2010, 02:04
Multiple cross-site scripting (XSS) vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) layout and (2) sortorder parameters.
| Vendor | Product | Version |
|---|---|---|
| boesch-it | simpnews | 𝑥 ≤ 2.47.03 |
| boesch-it | simpnews | 2.0.1 |
| boesch-it | simpnews | 2.13 |
| boesch-it | simpnews | 2.30 |
| boesch-it | simpnews | 2.30.2 |
| boesch-it | simpnews | 2.30.6 |
| boesch-it | simpnews | 2.31.0 |
| boesch-it | simpnews | 2.32.0 |
| boesch-it | simpnews | 2.32.1 |
| boesch-it | simpnews | 2.33.0 |
| boesch-it | simpnews | 2.33.01 |
| boesch-it | simpnews | 2.34 |
| boesch-it | simpnews | 2.34.0 |
| boesch-it | simpnews | 2.34.01 |
| boesch-it | simpnews | 2.35.00 |
| boesch-it | simpnews | 2.36.00 |
| boesch-it | simpnews | 2.37.00 |
| boesch-it | simpnews | 2.37.01 |
| boesch-it | simpnews | 2.37.02 |
| boesch-it | simpnews | 2.38 |
| boesch-it | simpnews | 2.38.02 |
| boesch-it | simpnews | 2.38.03 |
| boesch-it | simpnews | 2.38.04 |
| boesch-it | simpnews | 2.39.0 |
| boesch-it | simpnews | 2.40.01 |
| boesch-it | simpnews | 2.41.0 |
| boesch-it | simpnews | 2.41.02 |
| boesch-it | simpnews | 2.41.03 |
| boesch-it | simpnews | 2.42.0 |
| boesch-it | simpnews | 2.42.01 |
| boesch-it | simpnews | 2.44.00 |
| boesch-it | simpnews | 2.47.00 |
𝑥
= Vulnerable software versions
References