CVE-2010-2130

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-06-02 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in wflogin.jsp in Aris Global ARISg 5.0 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter.

Affected products

Arisglobal Arisg: 5.0

References

http://osvdb.org/62665
http://packetstormsecurity.org/1002-exploits/arisg5-xss.txt
http://secunia.com/advisories/38793
http://www.securityfocus.com/archive/1/509758/100/0/threaded
http://www.securityfocus.com/archive/1/509770/100/0/threaded
http://www.securityfocus.com/bid/38441
http://osvdb.org/62665
http://packetstormsecurity.org/1002-exploits/arisg5-xss.txt
http://secunia.com/advisories/38793
http://www.securityfocus.com/archive/1/509758/100/0/threaded
http://www.securityfocus.com/archive/1/509770/100/0/threaded
http://www.securityfocus.com/bid/38441

Get alerted when CVE-2010-2130 or the next vulnerability affects your stack