CVE-2010-2849

Cross-site scripting (XSS) vulnerability in productionnu2/nuedit.php in nuBuilder 10.04.20, and possibly other versions before 10.07.12, allows remote attackers to inject arbitrary web script or HTML via the f parameter.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:nusoftware:nubuilder:09.09.23:*:*:*:*:*:*:*
cpe:2.3:a:nusoftware:nubuilder:09.08.20:*:*:*:*:*:*:*
cpe:2.3:a:nusoftware:nubuilder:09.06.10:*:*:*:*:*:*:*
cpe:2.3:a:nusoftware:nubuilder:*:*:*:*:*:*:*:*
cpe:2.3:a:nusoftware:nubuilder:09.07.24:*:*:*:*:*:*:*
cpe:2.3:a:nusoftware:nubuilder:09.06.26:*:*:*:*:*:*:*

Information

Published : 2010-07-24 19:04

Updated : 2017-08-16 18:32


NVD link : CVE-2010-2849

Mitre link : CVE-2010-2849


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

nusoftware

  • nubuilder