CVE-2010-4097: Avatic Aardvark Topsites PHP

Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) mail, (2) title, (3) u, and (4) url parameters. NOTE: the q parameter is already covered by CVE-2009-2302.

Affected products

• Avatic Aardvark Topsites PHP: version 5.2.0 only; version 5.2.1 only

Published 2010-10-27. Last modified 2026-06-16.