{"id":"CVE-2010-3931","aliases":["EUVD-2010-3909","GHSA-w3xf-2x42-x6pw"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in multiple Rocomotion products, including P board 1.18...","description":"Cross-site scripting (XSS) vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.37 and earlier, PM bbs 1.07 and earlier, PM up bbs 1.08 and earlier, and PM forum 1.18 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01516,"percentile":0.74712,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2011-01-20T18:00:00Z","modified":"2026-06-16T23:23:50Z","products":[{"vendor":"rocomotion","product":"p_board"},{"vendor":"rocomotion","product":"p_diary_r"},{"vendor":"rocomotion","product":"p_forum"},{"vendor":"rocomotion","product":"p_link"},{"vendor":"rocomotion","product":"p_link_compact"},{"vendor":"rocomotion","product":"p_up_board"},{"vendor":"rocomotion","product":"pm_bbs"},{"vendor":"rocomotion","product":"pm_forum"},{"vendor":"rocomotion","product":"pplog"},{"vendor":"rocomotion","product":"pplog_2"}],"references":[{"url":"http://jvn.jp/en/jp/JVN09115481/index.html","tags":["third-party-advisory","x_refsource_JVN","x_transferred","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42957","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000006.html","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/45838","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64745","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://another.rocomotion.jp/12949466953653.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://osvdb.org/70495","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3931"},{"url":"https://github.com/advisories/GHSA-w3xf-2x42-x6pw"}],"sources":{"cve":[{"id":"CVE-2010-3931","description":"Cross-site scripting (XSS) vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.37 and earlier, PM bbs 1.07 and earlier, PM up bbs 1.08 and earlier, and PM forum 1.18 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.","status":"published","published":"2011-01-20T18:00:00Z","modified":"2024-08-07T03:26:12.154Z","updated_at":"2026-11-02T14:33:27.739358Z"}],"euvd":[{"id":"EUVD-2010-3909","description":"Cross-site scripting (XSS) vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.37 and earlier, PM bbs 1.07 and earlier, PM up bbs 1.08 and earlier, and PM forum 1.18 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.","status":"published","published":"2011-01-20T18:00:00Z","modified":"2024-08-07T03:26:12Z","updated_at":"2026-11-03T01:39:31.987488Z"}],"ghsa":[{"id":"GHSA-w3xf-2x42-x6pw","title":"Cross-site scripting (XSS) vulnerability in multiple Rocomotion products, including P board 1.18...","description":"Cross-site scripting (XSS) vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.37 and earlier, PM bbs 1.07 and earlier, PM up bbs 1.08 and earlier, and PM forum 1.18 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.","status":"published","published":"2022-05-13T01:18:05Z","modified":"2023-02-01T05:05:24Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:50:14.84305Z"}],"nvd":[{"id":"CVE-2010-3931","description":"Cross-site scripting (XSS) vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.37 and earlier, PM bbs 1.07 and earlier, PM up bbs 1.08 and earlier, and PM forum 1.18 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.","status":"published","published":"2011-01-20T19:00:05.193Z","modified":"2026-06-16T23:23:50.773Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:02:03.297831Z"}]}}