PT-2011-1706 · E107 · E107

Justin C. Klein Keane · Published 2011-03-15 · Updated 2017-08-17 · CVE-2010-4757

Mitre

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in submitnews.php in e107 before 0.7.23 allows remote attackers to inject arbitrary web script or HTML via the submitnews title parameter, a different vector than CVE-2008-6208. NOTE: some of these details are obtained from third party information. NOTE: this might be the same as CVE-2009-4083.1 or CVE-2011-0457.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2010-4757

Affected Products

E107

References · 8

• 🔥 http://madirish.net/?article=471 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4757 · Security Note
• http://e107.org/comment.php?comment.news.872 · Vendor Advisory
• http://e107.svn.sourceforge.net/viewvc/e107/trunk/e107_0.7/e107_admin/newspost.php?r1=11655&r2=11654&pathrev=11655 · Patch
• http://securitytracker.com/id?1024351 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4757 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61331 · Note
• http://e107.org/svn_changelog.php?version=0.7.23 · Note