CVE-2010-2032

Multiple cross-site scripting (XSS) vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3.1.5, 3.1.10, 4.0.6, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) digest_realm or (2) digest_username parameters. NOTE: some of these details are obtained from third party information.

• CWE-79

• http://packetstormsecurity.org/1005-exploits/cauchoresin312-xss.txtExploit
• http://secunia.com/advisories/39839Vendor Advisory
• http://www.securityfocus.com/archive/1/511341/100/0/threaded
• http://www.securityfocus.com/bid/40251Exploit
• http://www.vupen.com/english/advisories/2010/1201Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58733
• http://packetstormsecurity.org/1005-exploits/cauchoresin312-xss.txtExploit
• http://secunia.com/advisories/39839Vendor Advisory
• http://www.securityfocus.com/archive/1/511341/100/0/threaded
• http://www.securityfocus.com/bid/40251Exploit
• http://www.vupen.com/english/advisories/2010/1201Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58733

Published

May 24, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2026The web interface on the Cisco Scientific Atlanta WebSTAR DP…
• CVE-2010-2027Mathematica 7, when running on Linux, allows local users to …
• CVE-2010-2028Buffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI)…
• CVE-2010-2029Cybozu Office 7 Ktai and Dotsales do not properly restrict a…
• CVE-2010-2030Cross-site scripting (XSS) vulnerability in the External Lin…
• CVE-2010-2031KAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft W…
• CVE-2010-2033Directory traversal vulnerability in the Percha Multicategor…
• CVE-2010-2034Directory traversal vulnerability in the Percha Image Attach…
• CVE-2010-2035Directory traversal vulnerability in the Percha Gallery (com…
• CVE-2010-2036Directory traversal vulnerability in the Percha Fields Attac…
• CVE-2010-2037Directory traversal vulnerability in the Percha Downloads At…
• CVE-2010-2038Cross-site scripting (XSS) vulnerability in include/tool/edi…