CVE-2010-4848

Description

Multiple cross-site scripting (XSS) vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) url or (2) title parameter.

Affected products

• axscripts / axslinks0.3 – 0.3

References

• MISChttp://www.securityfocus.com/archive/1/514843/100/0/threaded
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/63411
• MISChttp://www.securityfocus.com/bid/44979
• EXPLOIThttp://packetstormsecurity.org/files/view/96006/axslinks-xss.txt
• MISChttp://evuln.com/vulns/139/summary.html