← Database

CVE-2010-2258

MEDIUM CVSS: 4.3 Published: 2010-06-09 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in signupconfirm.php in phpBannerExchange 1.2 Arabic allows remote attackers to inject arbitrary web script or HTML via the bannerurl parameter.

Affected Platforms

Phpbannerexchange Project Phpbannerexchange

Weakness Type

CWE-79

References