CVE-2010-4504

https://notcve.org/view.php?id=CVE-2010-4504

08 Dec 2010 — Multiple cross-site scripting (XSS) vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to (1) suggest-category.php and (2) suggest-listing.php. Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en eSyndiCat Directory v2.3 permite a atacantes remotos inyectar código web o HTML de su elección a través del parámetro title en (1) suggest-category.php y (2) suggest-listing.php. • http://osvdb.org/69638 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •