CVE-2010-4275: Dmasoftlab Radius Manager

Low severity, CVSS 3.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) name or (2) descr parameter in an (a) update_usergroup or a (b) store_nas action to admin.php.

Affected products

• Dmasoftlab Radius Manager: version 3.8.0 only

Published 2010-12-22. Last modified 2026-06-16.