Unscored severity · published Jun 9, 2010
CVE-2010-2256
Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/memberviewdetails.php and the (2) model parameter to videos.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PP
Pay Per Minute Video Chat Script · Payperviewvideosoftware
2.0; 2.1 · source: NVD
Affected product
PP
Pay Per Minute Video Chat Script
Payperviewvideosoftware
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2256
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2256
Exploit
http://packetstormsecurity.org/1001-exploits/ppmvcs-sqlxss.txt
Vendor Advisory
http://secunia.com/advisories/38086
Exploit
http://www.exploit-db.com/exploits/10983
More from Pay Per Minute Video Chat Script
–
CVE-2010-2257
SQL injection vulnerability in index_ie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter