CVE-2010-1333

Multiple cross-site scripting (XSS) vulnerabilities in Almas Inc. Compiere J300_A02 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2010-04-09

Last modified

2024-08-07

Weaknesses

CWE-79

Affected products

• Compiere (Almas)

References

• http://jvn.jp/en/jp/JVN38687002/index.html
• http://jvn.jp/en/jp/JVN57963254/index.html
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000008.html
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000009.html
• http://osvdb.org/63419
• http://secunia.com/advisories/39177
• http://www.compiere-japan.com/products/release/patch.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57493
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57494