CVE-2010-2154

Cross-site scripting (XSS) vulnerability in the Search Site in CMScout 2.09, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: some of these details are obtained from third party information.

• CWE-79

• http://osvdb.org/65010
• http://secunia.com/advisories/39986Vendor Advisory
• http://www.exploit-db.com/exploits/12806Exploit
• http://www.vupen.com/english/advisories/2010/1288Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58996
• http://osvdb.org/65010
• http://secunia.com/advisories/39986Vendor Advisory
• http://www.exploit-db.com/exploits/12806Exploit
• http://www.vupen.com/english/advisories/2010/1288Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58996

Published

Jun 3, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2148SQL injection vulnerability in the My Car (com_mycar) compon…
• CVE-2010-2149Session fixation vulnerability in Fujitsu e-Pares V01 L01, L…
• CVE-2010-2150Cross-site scripting (XSS) vulnerability Fujitsu e-Pares V01…
• CVE-2010-2151Cross-site request forgery (CSRF) vulnerability in Fujitsu e…
• CVE-2010-2152Unspecified vulnerability in JustSystems Ichitaro 2004 throu…
• CVE-2010-2153Unrestricted file upload vulnerability in admin/code/tce_fun…
• CVE-2010-2155Multiple cross-site scripting (XSS) vulnerabilities in zc/pu…
• CVE-2010-2156ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows …
• CVE-2010-2157Unspecified vulnerability in CA ARCserve Backup r11.5 SP4, r…
• CVE-2010-2158Multiple cross-site scripting (XSS) vulnerabilities in the S…
• CVE-2010-2159Dameng DM Database Server allows remote authenticated users …
• CVE-2010-2160Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.…