{"api_version":"1","generated_at":"2026-07-24T21:51:25+00:00","cve":"CVE-2010-4358","urls":{"html":"https://cve.report/CVE-2010-4358","api":"https://cve.report/api/cve/CVE-2010-4358.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-4358","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-4358"},"summary":{"title":"CVE-2010-4358","description":"Multiple cross-site scripting (XSS) vulnerabilities in gb.cgi in MRCGIGUY (MCG) Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) website, and (4) message parameters.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-12-01 16:06:13","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://secunia.com/advisories/42315","name":"http://secunia.com/advisories/42315","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"MCG GuestBook Multiple Script Insertion Vulnerabilities - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/514884/100/0/threaded","name":"http://www.securityfocus.com/archive/1/514884/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://packetstormsecurity.org/files/view/96101/mcgguestbook-xss.txt","name":"http://packetstormsecurity.org/files/view/96101/mcgguestbook-xss.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"MCG GuestBook 1.0 Cross Site Scripting ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://evuln.com/vulns/144/summary.html","name":"http://evuln.com/vulns/144/summary.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Multiple XSS in MCG GuestBook | Website Security","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/45043","name":"http://www.securityfocus.com/bid/45043","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Malformed Request","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4358","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4358","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"4358","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mrcgiguy","cpe5":"guestbook","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T03:43:14.792Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20101124 [eVuln.com] Multiple XSS in MCG GuestBook","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/514884/100/0/threaded"},{"name":"45043","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/45043"},{"name":"42315","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42315"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.org/files/view/96101/mcgguestbook-xss.txt"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://evuln.com/vulns/144/summary.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-11-24T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in gb.cgi in MRCGIGUY (MCG) Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) website, and (4) message parameters."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-10T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20101124 [eVuln.com] Multiple XSS in MCG GuestBook","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/514884/100/0/threaded"},{"name":"45043","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/45043"},{"name":"42315","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42315"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.org/files/view/96101/mcgguestbook-xss.txt"},{"tags":["x_refsource_MISC"],"url":"http://evuln.com/vulns/144/summary.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-4358","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in gb.cgi in MRCGIGUY (MCG) Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) website, and (4) message parameters."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20101124 [eVuln.com] Multiple XSS in MCG GuestBook","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/514884/100/0/threaded"},{"name":"45043","refsource":"BID","url":"http://www.securityfocus.com/bid/45043"},{"name":"42315","refsource":"SECUNIA","url":"http://secunia.com/advisories/42315"},{"name":"http://packetstormsecurity.org/files/view/96101/mcgguestbook-xss.txt","refsource":"MISC","url":"http://packetstormsecurity.org/files/view/96101/mcgguestbook-xss.txt"},{"name":"http://evuln.com/vulns/144/summary.html","refsource":"MISC","url":"http://evuln.com/vulns/144/summary.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-4358","datePublished":"2010-12-01T16:00:00.000Z","dateReserved":"2010-12-01T00:00:00.000Z","dateUpdated":"2024-08-07T03:43:14.792Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-12-01 16:06:13","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mrcgiguy:guestbook:1.0:*:*:*:*:*:*:*","matchCriteriaId":"27B2514F-871E-4913-81C6-9747FEA88F79"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"4358","Ordinal":"1","Title":"CVE-2010-4358","CVE":"CVE-2010-4358","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"4358","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in gb.cgi in MRCGIGUY (MCG) Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) website, and (4) message parameters.","Type":"Description","Title":"CVE-2010-4358"},{"CveYear":"2010","CveId":"4358","Ordinal":"2","NoteData":"2010-12-01","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"4358","Ordinal":"3","NoteData":"2018-10-10","Type":"Other","Title":"Modified"}]}}}