CVE-2010-2260: Multiple cross-site scripting (XSS) vulnerabilities in Gambit Design Bandwidth Meter, 0.72 and possibly 1.2...

Security readout for executives and security teams

This CVE describes cross-site scripting in legacy Gambit Design Bandwidth Meter admin pages. If an exposed instance is still running, an attacker could cause script or HTML to run in a user’s browser through crafted path input. The sources do not provide a vendor patch or active exploitation evidence. Exposure is likely limited to organizations still operating this old Gambit Design Bandwidth Meter web admin interface, especially if admin/ is internet-accessible. Most modern environments are unlikely to be affected unless they retained legacy PHP monitoring tools. Treat this as a targeted legacy cleanup item, not an enterprise-wide emergency. Prioritize quickly if the affected admin interface is exposed externally or used by privileged staff; otherwise handle through legacy application retirement and hardening work. Mitigation focus: Inventory for Gambit Design Bandwidth Meter 0.72 or 1.2 installations.; Restrict access to the admin/ interface to trusted networks or VPN users.; Check vendor or maintainer guidance for any available corrected release..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.