CVE-2010-1104

Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages.

• CWE-79

• http://secunia.com/advisories/38007Vendor Advisory
• http://www.osvdb.org/61655
• http://www.securityfocus.com/bid/37765
• http://www.vupen.com/english/advisories/2010/0104Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55599
• https://mail.zope.org/pipermail/zope-announce/2010-January/002229.htmlPatch, Vendor Advisory
• http://secunia.com/advisories/38007Vendor Advisory
• http://www.osvdb.org/61655
• http://www.securityfocus.com/bid/37765
• http://www.vupen.com/english/advisories/2010/0104Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55599
• https://mail.zope.org/pipermail/zope-announce/2010-January/002229.htmlPatch, Vendor Advisory

Published

Mar 25, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1098The ANI parser in Microsoft Windows before 7 on the x86 plat…
• CVE-2010-1099Integer overflow in Apple Safari allows remote attackers to …
• CVE-2010-1100Integer overflow in Arora allows remote attackers to bypass …
• CVE-2010-1101Integer overflow in Alexander Clauss iCab allows remote atta…
• CVE-2010-1102Integer overflow in OmniWeb allows remote attackers to bypas…
• CVE-2010-1103Integer overflow in Stainless allows remote attackers to byp…
• CVE-2010-1105Cross-site scripting (XSS) vulnerability in cgi/index.php in…
• CVE-2010-1106PHP remote file inclusion vulnerability in cgi/index.php in …
• CVE-2010-1107Cross-site scripting (XSS) vulnerability in the Recent Comme…
• CVE-2010-1108Cross-site scripting (XSS) vulnerability in the Control Pane…
• CVE-2010-1109Multiple SQL injection vulnerabilities in index.php in phpMy…
• CVE-2010-1110Directory traversal vulnerability in index.php in phpMySport…