What’s Vulnerable › Vulnerabilities

CVE-2010-2463

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2010-06-25 · updated 2026-06-16
• Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML via the post_id parameter in a modify action.

Affected products

• Jamroom: through 4.1.8; 1.0, 1.0-b1, 1.0-b2, 1.0-b3, 1.0-b4, 1.0-b5 (+103)

References

• http://secunia.com/advisories/40259
• http://www.htbridge.ch/advisory/xss_vulnerability_in_jamroom.html
• http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1756
• http://www.securityfocus.com/bid/41071
• http://secunia.com/advisories/40259
• http://www.htbridge.ch/advisory/xss_vulnerability_in_jamroom.html
• http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1756
• http://www.securityfocus.com/bid/41071

Get alerted when CVE-2010-2463 or the next vulnerability affects your stack