Unrated severityNVD Advisory· Published May 7, 2010· Updated Jun 16, 2026
CVE-2010-1856
CVE-2010-1856
Description
Cross-site scripting (XSS) vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the prod parameter in a products.details action.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- cpe:2.3:a:realitymedias:repairshop2:1.9.023:-:trial:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- packetstormsecurity.org/1003-exploits/repairshop2-xss.txtnvdExploit
- www.securityfocus.com/bid/38907nvdExploit
- secunia.com/advisories/39043nvdVendor Advisory
News mentions
0No linked articles in our index yet.