VulnerabilityModified
CVE-2010-4275
Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) name or (2) descr parameter in an (a) update_usergroup or a (b) store_nas action to…
LOW 3.5EPSS 1.27%
Does this matter?
Lower severity and a low EPSS score (1.27%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) name or (2) descr parameter in an (a) update_usergroup or a (b) store_nas action to admin.php.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
- EPSS
- 1.27% probability · 68th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- dmasoftlab/radius manager
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/42364Vendor Advisory
- http://www.exploit-db.com/exploits/15766
- http://www.securityfocus.com/bid/45481Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64199
- http://secunia.com/advisories/42364Vendor Advisory
- http://www.exploit-db.com/exploits/15766
- http://www.securityfocus.com/bid/45481Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64199
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.