CVEvulnerability
CVE-2009-2780
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-08-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to category.php, view parameter to (2) login.php and (3) viewlisting.php, page parameter to (4) searchresults.php and (5) toplistings.php, and (6) member parameter to viewmember.php.
Affected configurations
• 68 classifieds 68 classifieds 4.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.org/0907-exploits/68classifieds-xss.txt Exploit
- http://secunia.com/advisories/36034 Vendor Advisory
- http://www.osvdb.org/56564 Exploit
- http://www.osvdb.org/56565 Exploit
- http://www.osvdb.org/56566 Exploit
- http://www.osvdb.org/56567 Exploit
- http://www.osvdb.org/56568 Exploit
- http://www.osvdb.org/56569 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52071 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.org/0907-exploits/68classifieds-xss.txt Exploit
- http://secunia.com/advisories/36034 Vendor Advisory
- http://www.osvdb.org/56564 Exploit
- http://www.osvdb.org/56565 Exploit
- http://www.osvdb.org/56566 Exploit
- http://www.osvdb.org/56567 Exploit
- http://www.osvdb.org/56568 Exploit
- http://www.osvdb.org/56569 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52071 exchange.xforce.ibmcloud.com