Unscored severity · published Jul 2, 2010
CVE-2010-2617
Cross-site scripting (XSS) vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary web script or HTML via the chapter parameter
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary web script or HTML via the chapter parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PB
Php Bible Search · Paul Mcenery
0.99 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2617
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2617
Exploit
http://www.packetstormsecurity.com/1006-exploits/phpbiblesearch-sqlxss.txt
Exploit
http://www.securityfocus.com/bid/41197
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/59843
More from Php Bible Search
–
CVE-2010-2616
SQL injection vulnerability in bible.php in PHP Bible Search, probably 0.99, allows remote attackers to execute arbitrary SQL commands via the chapter parameter