YUI CVE-2010-4710 Cross-Site Scripting Vulnerability
BID:73520
Info
YUI CVE-2010-4710 Cross-Site Scripting Vulnerability
| Bugtraq ID: | 73520 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-4710 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 28 2011 12:00AM |
| Updated: | Jan 28 2011 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Yahoo! YUI 2.8.1 Yahoo! YUI 2.5.2 Yahoo! YUI 2.2.2 Yahoo! YUI 2.8.2 Yahoo! YUI 2.8.1 Pr1 Yahoo! YUI 2.8.0 Yahoo! YUI 2.7.0 Yahoo! YUI 2.6.0 Yahoo! YUI 2.5.1 Yahoo! YUI 2.5.0 Yahoo! YUI 2.4.1 Yahoo! YUI 2.4.0 Yahoo! YUI 2.3.1 Yahoo! YUI 2.3.0 Yahoo! YUI 2.2.0 |
| Not Vulnerable: | |
Exploit / POC
YUI CVE-2010-4710 Cross-Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
References
YUI CVE-2010-4710 Cross-Site Scripting Vulnerability
References:
References:
- General - Forums - YUI Library (MISC)
- IBM X-Force Exchange Beta (XF)
- YUI 2 API Docs and Archives (CONFIRM)
- YUI 2 API Docs and Archives (MISC)