CVEvulnerability
CVE-2009-3171
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-09-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter to user.php or (2) lookup parameter to search.php.
Affected configurations
• anantasoft gazelle cms (<= 1.0)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.org/0909-exploits/gazellecms-xss.txt Exploit
- http://secunia.com/advisories/33686 Vendor Advisory
- http://www.exploit-db.com/exploits/9425 www.exploit-db.com
- http://www.vupen.com/english/advisories/2009/2541 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52415 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.org/0909-exploits/gazellecms-xss.txt Exploit
- http://secunia.com/advisories/33686 Vendor Advisory
- http://www.exploit-db.com/exploits/9425 www.exploit-db.com
- http://www.vupen.com/english/advisories/2009/2541 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52415 exchange.xforce.ibmcloud.com