Cross-Site Scripting Vulnerability in Saurus CMS by Saurus
CVE-2010-1997

Currently unrated

Key Information:

Vendor

Saurus

Status
Saurus Cms
Vendor
CVE Published:
20 May 2010

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2010-1997?

Saurus CMS 4.7.0 contains a cross-site scripting vulnerability that enables remote authenticated users with 'Article list' edit privileges to inject arbitrary web scripts or HTML code through the pealkiri parameter in admin/edit.php. This flaw could be exploited to execute scripts in the context of other users, potentially leading to unauthorized actions, data theft, or other malicious activities on the platform.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2010-1997 - Proof of Concept

References

http://www.securityfocus.com/archive/1/511223/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://osvdb.org/64570
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/40059
vdb-entryx_refsource_BID

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.