CVE-2010-3070 — Vulnetix

CVE-2010-3070 PUBLISHED CVSS 4.300000190734863 MEDIUM

Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to an arbitrary PHP script that uses NuSOAP classes.

EPSS 9.63% · 93.0th percentile

Risk Scores

CVSS 2.0

4.300000190734863

EPSS Score

9.63%

93.0th percentile

Affected Products

Vendor	Product	Versions
dietrich_ayala	nusoap	0.9.5
n/a	n/a	*

Timeline

Sep 28, 2010 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Dec 18, 2022 EPSS Score
Feb 3, 2023 EPSS Score
Feb 9, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 2, 2023 EPSS Score
Jul 17, 2023 EPSS Score
Sep 7, 2023 EPSS Score

References

[oss-security] 20100903 CVE request: XSS in nusoap mailing-list
https://bugzilla.redhat.com/show_bug.cgi?id=629585 url
FEDORA-2010-15080 vendor-advisory
FEDORA-2010-15082 vendor-advisory
http://git.debian.org/?p=users/olberger-guest/nusoap.git%3Ba=blob%3Bf=debian/patches/595248.patch%3Bh=6af3d725fe74d839764d9755c5bb18458a192518%3Bhb=268f03b88c6900d1a87b17734c248c705c22cb07 url
[oss-security] 20100907 Re: CVE request: XSS in nusoap mailing-list
41653 third-party-advisory
http://sourceforge.net/projects/nusoap/forums/forum/193579/topic/3834005 url
http://git.mantisbt.org/?p=mantisbt.git%3Ba=commit%3Bh=edb817991b99cd5538f102be26865fde7c6b7212 url
https://bugzilla.redhat.com/show_bug.cgi?id=633011 url
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=595248 url
ADV-2010-2535 vdb
[oss-security] 20100914 CVE request: mantis before 1.2.3 (XSS) mailing-list
42959 vdb
FEDORA-2010-14100 vendor-advisory
FEDORA-2010-14098 vendor-advisory
FEDORA-2010-15061 vendor-advisory
[oss-security] 20100914 Re: CVE request: mantis before 1.2.3 (XSS) mailing-list
http://www.mantisbt.org/bugs/view.php?id=12312 url
[mantisbt-announce] 20100914 MantisBT 1.2.3 Released mailing-list

…and 7 more

Open in Interactive Console →