CVE-2010-0997

Cross-site scripting (XSS) vulnerability in 107_plugins/content/content_manager.php in the Content Management plugin in e107 before 0.7.20, when the personal content manager is enabled, allows user-assisted remote authenticated users to inject arbitrary web script or HTML via the content_heading parameter.

• CWE-79

• http://e107.org/comment.php?comment.news.864Patch
• http://e107.org/svn_changelog.php?version=0.7.20
• http://secunia.com/advisories/39013Vendor Advisory
• http://secunia.com/secunia_research/2010-43/Vendor Advisory
• http://www.securityfocus.com/archive/1/510809/100/0/threaded
• http://www.securityfocus.com/bid/39539
• http://www.vupen.com/english/advisories/2010/0919Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57933
• http://e107.org/comment.php?comment.news.864Patch
• http://e107.org/svn_changelog.php?version=0.7.20
• http://secunia.com/advisories/39013Vendor Advisory
• http://secunia.com/secunia_research/2010-43/Vendor Advisory
• http://www.securityfocus.com/archive/1/510809/100/0/threaded
• http://www.securityfocus.com/bid/39539
• http://www.vupen.com/english/advisories/2010/0919Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57933

Published

Apr 20, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0991Multiple heap-based buffer overflows in imlib2 1.4.3 allow c…
• CVE-2010-0992Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2010-0993Unrestricted file upload vulnerability in Pulse CMS Basic 1.…
• CVE-2010-0994Multiple buffer overflows in src/vl/vlDAT.cpp in Visualizati…
• CVE-2010-0995Stack-based buffer overflow in Internet Download Manager (ID…
• CVE-2010-0996Unrestricted file upload vulnerability in e107 before 0.7.20…
• CVE-2010-0998Multiple stack-based buffer overflows in Free Download Manag…
• CVE-2010-0999Directory traversal vulnerability in Free Download Manager (…
• CVE-2010-1000Directory traversal vulnerability in KGet in KDE SC 4.0.0 th…
• CVE-2010-10001A vulnerability, which was classified as problematic, was fo…5.5
• CVE-2010-10002** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified a…6.1
• CVE-2010-10003A vulnerability classified as critical was found in gesellix…9.8