CVE-2010-2256 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 1.5% (pctl 73)
Patch early
A public exploit exists.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/memberviewdetails.php and the (2) model parameter to videos.php.
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| EPSS | 1.45% — more likely to be exploited than 73% of all CVEs |
| Weakness | CWE-79 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2010-06-09 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| payperviewvideosoftware | pay per minute video chat script |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Pay Per Minute Video Chat Script 2.0/2.1 - Multiple Vulnerabilities | 2010-01-04 |
References
→ the Explorer · watch your stack · NVD