Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2010-4873

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WeBid 0.8.5 P1版本的confirm.php中存在跨站脚本攻击漏洞。远程攻击者可借助id参数注入任意web脚本或者HTML。

AI Predicted 6.1 Difficulty: Trivial EPSS 1.78% · P76

Public Exploits 1

ExploitDB · 1 EDB-34989 [webapps]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2010-4873

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
WeBid 'confirm.php'跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WeBid 0.8.5 P1版本的confirm.php中存在跨站脚本攻击漏洞。远程攻击者可借助id参数注入任意web脚本或者HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2010-4873

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2010-4873

请登录查看更多情报信息。

Vendor Advisories for CVE-2010-4873 (4)

Exploits & Public PoCs for CVE-2010-4873 (1)

Other References for CVE-2010-4873 (2)

Same Patch Batch · n/a · 2011-10-07 · 26 CVEs total

CVE-2010-4882 Auto CMS 'autocms.php'跨站脚本攻击漏洞
CVE-2011-2191 Cherokee 跨站请求伪造漏洞
CVE-2011-2190 Cherokee 加密问题漏洞
CVE-2010-4892 TYPO3 powermail 扩展件跨站脚本攻击漏洞
CVE-2010-4891 TYPO3 Yet Another Calendar扩展件SQL注入漏洞
CVE-2010-4890 TYPO3 Yet Another Calendar扩展件跨站脚本攻击漏洞
CVE-2010-4889 TYPO3 Tiny Market扩展件任意代码执行漏洞
CVE-2010-4888 TYPO3 Tiny Market SQL注入漏洞
CVE-2010-4887 TYPO3 Commenting system Backend模块扩展功能SQL注入漏洞
CVE-2010-4886 TYPO tweetbutto扩展件跨站脚本攻击漏洞
CVE-2010-4885 TYPO3 XING Button扩展件跨站脚本攻击漏洞
CVE-2010-4884 Gaestebuch 'guestbook/gbook.php'PHP远程文件包含漏洞
CVE-2010-4883 MODx Revolution 'manager/index.php'跨站脚本攻击漏洞
CVE-2011-3868 VMware多个产品缓冲区溢出漏洞
CVE-2010-4881 ApPHP Calendar 'calendar.class.php'多个跨站请求伪造
CVE-2010-4880 ApPHP Calendar 'calendar.class.php'多个跨站脚本攻击漏洞
CVE-2010-4879 dompdf 'dompdf.php'PHP远程文件包含漏洞
CVE-2010-4878 Kontakt Formular 'formmailer.php'PHP远程文件包含漏洞
CVE-2010-4877 OneCMS 'index.php'跨站脚本攻击漏洞
CVE-2010-4876 mBlogger 'viewpost.php'SQL注入漏洞

Showing top 20 of 26 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2010-4873

No comments yet

Leave a comment