CVE-2010-4355

Published: Dec 1, 2010Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in DaDaBIK before 4.3 beta2, when the insert or edit feature is enabled, allows remote authenticated users to inject arbitrary web script or HTML via the select_single parameter.

Affected (41)

Products: Dadabik: Dadabik

Dadabik

1 product

Dadabik

Configuration A

41 vulnerable

Vulnerable Software	Affected Versions
Dadabik Dadabik	Up to 4.3
Dadabik Dadabik	Version 1.0.1 beta
Dadabik Dadabik	Version 1.0.2 beta
Dadabik Dadabik	Version 1.0.3 beta
Dadabik Dadabik	Version 1.0.4 beta
Dadabik Dadabik	Version 1.0.5 beta
Dadabik Dadabik	Version 1.0 beta
Dadabik Dadabik	Version 1.1 beta
Dadabik Dadabik	Version 1.5
Dadabik Dadabik	Version 1.5b
Dadabik Dadabik	Version 1.6
Dadabik Dadabik	Version 1.7
Dadabik Dadabik	Version 1.8
Dadabik Dadabik	Version 1.9.1
Dadabik Dadabik	Version 1.9
Dadabik Dadabik	Version 2.0.1 beta
Dadabik Dadabik	Version 2.0 beta
Dadabik Dadabik	Version 2.1 beta
Dadabik Dadabik	Version 2.1b beta
Dadabik Dadabik	Version 2.2.1
Dadabik Dadabik	Version 2.2.1 beta
Dadabik Dadabik	Version 2.2 beta
Dadabik Dadabik	Version 3.0
Dadabik Dadabik	Version 3.0 beta
Dadabik Dadabik	Version 3.1 beta
Dadabik Dadabik	Version 3.2
Dadabik Dadabik	Version 3.2 beta
Dadabik Dadabik	Version 4.0
Dadabik Dadabik	Version 4.0 alpha
Dadabik Dadabik	Version 4.0 beta2
Dadabik Dadabik	Version 4.0 beta
Dadabik Dadabik	Version 4.1
Dadabik Dadabik	Version 4.1 beta
Dadabik Dadabik	Version 4.1 rc1
Dadabik Dadabik	Version 4.1 rc2
Dadabik Dadabik	Version 4.1 rc3
Dadabik Dadabik	Version 4.2
Dadabik Dadabik	Version 4.2 beta
Dadabik Dadabik	Version 4.3 alpha
Dadabik Dadabik	Version 4.3 beta2
Dadabik Dadabik	Version 4.3 beta