CVE-2010-3025

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.34%

Published

Aug 16, 2010

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) excerpt parameter to application/modules/admin/controllers/posts.php, as reachable by admin/posts/edit; and the (2) content parameter to application/modules/admin/controllers/pages.php, as reachable by admin/posts/edit.

Weaknesses (CWE)

CWE-79

Affected Products (1)

tomaz-muraus · open_blogvulnerable

References (16)

http://packetstormsecurity.org/1008-exploits/openblog-xssxsrf.txt

http://secunia.com/advisories/40876

Vendor Advisory

http://www.htbridge.ch/advisory/xss_vulnerability_in_open_blog.html

http://www.htbridge.ch/advisory/xss_vulnerability_in_open_blog_1.html

http://www.securityfocus.com/archive/1/512895/100/0/threaded

http://www.securityfocus.com/archive/1/512901/100/0/threaded