CVE-2010-2615
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Grafik CMS 1.1.2以及早期的版本中的admin/admin.php存在多个跨站脚本攻击漏洞。远程攻击者可以借助edit_page操作中的(1) page_menu 和 (2) description参数注入任意的web脚本和HTML。
Public Exploits 1
ExploitDB · 1
EDB-14342 [webapps]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2010-2615
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) page_menu and (2) description parameters in an edit_page action.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Grafik-Power Grafik CMS 'admin/admin.php'多个跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Grafik CMS 1.1.2以及早期的版本中的admin/admin.php存在多个跨站脚本攻击漏洞。远程攻击者可以借助edit_page操作中的(1) page_menu 和 (2) description参数注入任意的web脚本和HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2010-2615
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-2615
请登录查看更多情报信息。
Vendor Advisories for CVE-2010-2615 (2)
Other References for CVE-2010-2615 (2)
-
http://www.htbridge.ch/advisory/xss_vulnerability_in_grafik_cms.html x_refsource_MISC
Same Patch Batch · n/a · 2010-07-01 · 17 CVEs total
| CVE-2010-2609 | 2daybiz Job Search Engine Script 脚本show_search_result.php SQL注入漏洞 | |
| CVE-2010-2610 | 2daybiz Job Site Script 多个SQL注入漏洞 | |
| CVE-2010-2611 | i-netsolution Job Search Engine 'show_search_result.php'SQL注入漏洞 | |
| CVE-2010-2612 | HP OpenVMS Auditing特征未明信息泄露漏洞 | |
| CVE-2010-2613 | Harmistechnology com_awd_song组件跨站脚本攻击漏洞 | |
| CVE-2010-2614 | Grafik-Power Grafik CMS 'admin/admin.php'脚本SQL注入漏洞 | |
| CVE-2010-2616 | PHP Bible Search 'bible.php'SQL注入漏洞 | |
| CVE-2010-2617 | PHP Bible Search 'bible.php'跨站脚本攻击漏洞 | |
| CVE-2010-2618 | Insanevisions AdaptCMS 'inc/smarty/libs/init.php' PHP远程文件包含漏洞 | |
| CVE-2010-1522 | Ordasoft BookLibrary Basic组件多个SQL注入漏洞 | |
| CVE-2010-2233 | LibTIFF 输入验证错误漏洞 | |
| CVE-2010-2594 | Intersect_Alliance多个Snare Agents Web Interface跨站请求伪造漏洞 | |
| CVE-2010-2595 | LibTIFF TIFFYCbCrtoRGB函数输入拒绝服务攻击漏洞 | |
| CVE-2010-2596 | LibTIFF tif_ojpeg.c程序OJPEGPostDecode函数远程拒绝服务攻击漏洞 | |
| CVE-2010-2597 | LibTIFF tif_ojpeg.c程序TIFFVStripSize函数远程拒绝服务攻击漏洞 | |
| CVE-2010-2598 | Red Hat Enterprise Linux拒绝服务攻击漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2010-2615
No comments yet