Unrated severityNVD Advisory· Published Sep 28, 2010· Updated Jun 16, 2026
CVE-2010-3070
CVE-2010-3070
Description
Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to an arbitrary PHP script that uses NuSOAP classes.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:dietrich_ayala:nusoap:0.9.5:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
20- bugs.debian.org/cgi-bin/bugreport.cginvd
- git.mantisbt.orgnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-September/048317.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-September/048325.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-September/048548.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-September/048639.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-September/048659.htmlnvd
- secunia.com/advisories/41653nvd
- sourceforge.net/mailarchive/message.phpnvd
- sourceforge.net/projects/nusoap/forums/forum/193579/topic/3834005nvd
- www.mantisbt.org/bugs/changelog_page.phpnvd
- www.mantisbt.org/bugs/view.phpnvd
- www.openwall.com/lists/oss-security/2010/09/03/2nvd
- www.openwall.com/lists/oss-security/2010/09/07/4nvd
- www.openwall.com/lists/oss-security/2010/09/14/12nvd
- www.openwall.com/lists/oss-security/2010/09/14/13nvd
- www.securityfocus.com/bid/42959nvd
- www.vupen.com/english/advisories/2010/2535nvd
- bugzilla.redhat.com/show_bug.cginvd
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.