CVE-2010-2852

N/A Unknown

Published: July 25, 2010 Modified: April 29, 2026

Description

Cross-site scripting (XSS) vulnerability in modules/headlines/magpierss/scripts/magpie_debug.php in RunCms 2.1, when the Headlines module is enabled, allows remote attackers to inject arbitrary web script or HTML via the url parameter.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://cross-site-scripting.blogspot.com/2010/07/runcms-21-magpie-rss-module-reflected.html

Source: cve@mitre.org

Exploit

http://osvdb.org/66244

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/40521

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/41551

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/60224

Source: cve@mitre.org

http://cross-site-scripting.blogspot.com/2010/07/runcms-21-magpie-rss-module-reflected.html