CVE-2010-1333

Multiple cross-site scripting (XSS) vulnerabilities in Almas Inc. Compiere J300_A02 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://jvn.jp/en/jp/JVN38687002/index.html
• http://jvn.jp/en/jp/JVN57963254/index.html
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000008.html
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000009.html
• http://osvdb.org/63419
• http://secunia.com/advisories/39177Vendor Advisory
• http://www.compiere-japan.com/products/release/patch.htmlPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57493
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57494
• http://jvn.jp/en/jp/JVN38687002/index.html
• http://jvn.jp/en/jp/JVN57963254/index.html
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000008.html
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000009.html
• http://osvdb.org/63419
• http://secunia.com/advisories/39177Vendor Advisory
• http://www.compiere-japan.com/products/release/patch.htmlPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57493
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57494

Published

Apr 9, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1327Multiple SQL injection vulnerabilities in TornadoStore 1.4.3…
• CVE-2010-1328Multiple cross-site scripting (XSS) vulnerabilities in Torna…
• CVE-2010-1329Imperva SecureSphere Web Application Firewall and Database F…
• CVE-2010-1330The regular expression engine in JRuby before 1.4.1, when $K…
• CVE-2010-1331SQL injection vulnerability in Heartlogic HL-SiteManager all…
• CVE-2010-1332Cross-site scripting (XSS) vulnerability in PrettyBook Prett…
• CVE-2010-1334Unrestricted file upload vulnerability in Pulse CMS Basic 1.…
• CVE-2010-1335Multiple PHP remote file inclusion vulnerabilities in Insky …
• CVE-2010-1336Multiple SQL injection vulnerabilities in INVOhost 3.4 allow…
• CVE-2010-1337Multiple PHP remote file inclusion vulnerabilities in defini…
• CVE-2010-1338SQL injection vulnerability in ts_other.php in the Teamsite …
• CVE-2010-1339Cross-site scripting (XSS) vulnerability in ts_other.php in …