CVE-2010-0997

Published: Apr 20, 2010Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in 107_plugins/content/content_manager.php in the Content Management plugin in e107 before 0.7.20, when the personal content manager is enabled, allows user-assisted remote authenticated users to inject arbitrary web script or HTML via the content_heading parameter.

Affected (20)

Products: E107: E107

1 product

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
E107 E107	Up to 0.7.19
E107 E107	Version 0.7.0
E107 E107	Version 0.7.10
E107 E107	Version 0.7.11
E107 E107	Version 0.7.12
E107 E107	Version 0.7.13
E107 E107	Version 0.7.14
E107 E107	Version 0.7.15
E107 E107	Version 0.7.16
E107 E107	Version 0.7.17
E107 E107	Version 0.7.18
E107 E107	Version 0.7.1
E107 E107	Version 0.7.2
E107 E107	Version 0.7.3
E107 E107	Version 0.7.4
E107 E107	Version 0.7.5
E107 E107	Version 0.7.6
E107 E107	Version 0.7.7
E107 E107	Version 0.7.8
E107 E107	Version 0.7.9

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (16)

http://e107.org/comment.php?comment.news.864

Source: PSIRT-CNA@flexerasoftware.com

Patch

http://e107.org/svn_changelog.php?version=0.7.20

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/39013

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/secunia_research/2010-43/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.securityfocus.com/archive/1/510809/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/bid/39539

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2010/0919

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/57933

Source: PSIRT-CNA@flexerasoftware.com

http://e107.org/comment.php?comment.news.864

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://e107.org/svn_changelog.php?version=0.7.20

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/39013

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/secunia_research/2010-43/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/510809/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/39539

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/0919

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/57933

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.