CVEvulnerability
CVE-2009-2785
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-08-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter to buy.php and the id parameter to (2) contact.php and (3) tellafriend.php.
Affected configurations
• classifiedphpscript php open classifieds script
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/56657 Exploit
- http://osvdb.org/56658 Exploit
- http://osvdb.org/56659 Exploit
- http://packetstormsecurity.org/0907-exploits/openclassifieds-xss.txt packetstormsecurity.org
- http://secunia.com/advisories/35929 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52123 exchange.xforce.ibmcloud.com
- http://osvdb.org/56657 Exploit
- http://osvdb.org/56658 Exploit
- http://osvdb.org/56659 Exploit
- http://packetstormsecurity.org/0907-exploits/openclassifieds-xss.txt packetstormsecurity.org
- http://secunia.com/advisories/35929 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52123 exchange.xforce.ibmcloud.com