{"api_version":"1","generated_at":"2026-07-23T10:46:29+00:00","cve":"CVE-2010-2718","urls":{"html":"https://cve.report/CVE-2010-2718","api":"https://cve.report/api/cve/CVE-2010-2718.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-2718","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-2718"},"summary":{"title":"CVE-2010-2718","description":"Multiple cross-site scripting (XSS) vulnerabilities in CruxSoftware CruxPA 2.00, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) txtusername parameter to login.php, (2) todo parameter to newtodo.php, and unspecified vectors to (3) newtelephone.php and (4) newappointment.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-07-13 18:30:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://packetstormsecurity.org/1007-exploits/cruxpa-xss.txt","name":"http://packetstormsecurity.org/1007-exploits/cruxpa-xss.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Files ≈ Packet Storm","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_1.html","name":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_1.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"High-Tech Bridge SA - Advisories - XSS vulnerability in CruxPA","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/41495","name":"http://www.securityfocus.com/bid/41495","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CruxPA Multiple HTML Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_2.html","name":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_2.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"High-Tech Bridge SA - Advisories - XSS vulnerability in CruxPA","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_3.html","name":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_3.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"High-Tech Bridge SA - Advisories - XSS vulnerability in CruxPA","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/512243/100/0/threaded","name":"http://www.securityfocus.com/archive/1/512243/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2010/1709","name":"http://www.vupen.com/english/advisories/2010/1709","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa.html","name":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"High-Tech Bridge SA - Advisories - XSS vulnerability in CruxPA","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2718","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2718","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"2718","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cruxsoftware","cpe5":"cruxpa","cpe6":"2.00","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T02:39:37.696Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_3.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.org/1007-exploits/cruxpa-xss.txt"},{"name":"ADV-2010-1709","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/1709"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa.html"},{"name":"20100708 XSS vulnerability in CruxPA","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/512243/100/0/threaded"},{"name":"41495","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/41495"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_2.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_1.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-07-05T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in CruxSoftware CruxPA 2.00, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) txtusername parameter to login.php, (2) todo parameter to newtodo.php, and unspecified vectors to (3) newtelephone.php and (4) newappointment.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-10T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_3.html"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.org/1007-exploits/cruxpa-xss.txt"},{"name":"ADV-2010-1709","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/1709"},{"tags":["x_refsource_MISC"],"url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa.html"},{"name":"20100708 XSS vulnerability in CruxPA","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/512243/100/0/threaded"},{"name":"41495","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/41495"},{"tags":["x_refsource_MISC"],"url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_2.html"},{"tags":["x_refsource_MISC"],"url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_1.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-2718","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in CruxSoftware CruxPA 2.00, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) txtusername parameter to login.php, (2) todo parameter to newtodo.php, and unspecified vectors to (3) newtelephone.php and (4) newappointment.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_3.html","refsource":"MISC","url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_3.html"},{"name":"http://packetstormsecurity.org/1007-exploits/cruxpa-xss.txt","refsource":"MISC","url":"http://packetstormsecurity.org/1007-exploits/cruxpa-xss.txt"},{"name":"ADV-2010-1709","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/1709"},{"name":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa.html","refsource":"MISC","url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa.html"},{"name":"20100708 XSS vulnerability in CruxPA","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/512243/100/0/threaded"},{"name":"41495","refsource":"BID","url":"http://www.securityfocus.com/bid/41495"},{"name":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_2.html","refsource":"MISC","url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_2.html"},{"name":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_1.html","refsource":"MISC","url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_1.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-2718","datePublished":"2010-07-13T18:00:00.000Z","dateReserved":"2010-07-13T00:00:00.000Z","dateUpdated":"2024-08-07T02:39:37.696Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-07-13 18:30:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cruxsoftware:cruxpa:2.00:*:*:*:*:*:*:*","matchCriteriaId":"C78D740D-9685-43B1-BF03-BC87904FF033"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"2718","Ordinal":"1","Title":"CVE-2010-2718","CVE":"CVE-2010-2718","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"2718","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in CruxSoftware CruxPA 2.00, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) txtusername parameter to login.php, (2) todo parameter to newtodo.php, and unspecified vectors to (3) newtelephone.php and (4) newappointment.php.","Type":"Description","Title":"CVE-2010-2718"},{"CveYear":"2010","CveId":"2718","Ordinal":"2","NoteData":"2010-07-13","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"2718","Ordinal":"3","NoteData":"2018-10-10","Type":"Other","Title":"Modified"}]}}}