CVE-2010-4976

Name of the Vulnerable Software and Affected Versions MetInfo version 3.0

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the searchword parameter in the "search/search.php" file, also known as the Search Box field.

Recommendations For MetInfo version 3.0, consider restricting access to the search functionality until a fix is available, or avoid using the searchword parameter in the search/search.php file to minimize the risk of exploitation.