CVE-2010-2858

Public PoC / Exploit (2)

TrickestTrickest PoC index Exploit-DBSimpNews 2.47.3 - Multiple Cross-Site Scripting Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) layout and (2) sortorder parameters.

Weaknesses (CWE)

CWE-79

Affected Products (32)

boesch-it · simpnewsvulnerable

References (12)

http://packetstormsecurity.org/1007-exploits/simpnews-xss.txt

Exploit

http://secunia.com/advisories/40501

Vendor Advisory

http://websecurity.com.ua/4245/

Exploit

http://www.securityfocus.com/archive/1/512271/100/0/threaded

http://www.securityfocus.com/bid/41517

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/60244

http://packetstormsecurity.org/1007-exploits/simpnews-xss.txt

Exploit

http://secunia.com/advisories/40501

Vendor Advisory

http://websecurity.com.ua/4245/

Exploit

http://www.securityfocus.com/archive/1/512271/100/0/threaded

http://www.securityfocus.com/bid/41517

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/60244