CVE-2010-2858

Published: Jul 25, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) layout and (2) sortorder parameters.

Affected (32)

Products: Boesch It: Simpnews

Boesch It

1 product

Simpnews

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Boesch It Simpnews	Up to 2.47.03
Boesch It Simpnews	Version 2.0.1
Boesch It Simpnews	Version 2.13
Boesch It Simpnews	Version 2.30.2
Boesch It Simpnews	Version 2.30.6
Boesch It Simpnews	Version 2.30
Boesch It Simpnews	Version 2.31.0
Boesch It Simpnews	Version 2.32.0
Boesch It Simpnews	Version 2.32.1
Boesch It Simpnews	Version 2.33.01
Boesch It Simpnews	Version 2.33.0
Boesch It Simpnews	Version 2.34.01
Boesch It Simpnews	Version 2.34.0
Boesch It Simpnews	Version 2.34
Boesch It Simpnews	Version 2.35.00
Boesch It Simpnews	Version 2.36.00
Boesch It Simpnews	Version 2.37.00
Boesch It Simpnews	Version 2.37.01
Boesch It Simpnews	Version 2.37.02
Boesch It Simpnews	Version 2.38.02
Boesch It Simpnews	Version 2.38.03
Boesch It Simpnews	Version 2.38.04
Boesch It Simpnews	Version 2.38
Boesch It Simpnews	Version 2.39.0
Boesch It Simpnews	Version 2.40.01
Boesch It Simpnews	Version 2.41.02
Boesch It Simpnews	Version 2.41.03
Boesch It Simpnews	Version 2.41.0
Boesch It Simpnews	Version 2.42.01
Boesch It Simpnews	Version 2.42.0
Boesch It Simpnews	Version 2.44.00
Boesch It Simpnews	Version 2.47.00