Skip to content
OpenAdvisories
Unscored CVE-2010-2722 EUVD-2010-2726GHSA-8j2j-623g-9cwf

Cross-site scripting (XSS) vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to inject arbitrary web scr…

Published Jul 13, 2010 · Updated Sep 17, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to inject arbitrary web script or HTML via the artist_id parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

  • 40438 third-party-advisory