CVEvulnerability
CVE-2009-3539
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-10-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web script or HTML via the (1) cname parameter to subclass.php and the (2) sn parameter to listads.php.
Affected configurations
• yourfreeworld ultra classifieds pro
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.org/0907-exploits/ultraclassifieds-xss.txt Exploit
- http://secunia.com/advisories/35857 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1965 Vendor Advisory
- http://packetstormsecurity.org/0907-exploits/ultraclassifieds-xss.txt Exploit
- http://secunia.com/advisories/35857 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1965 Vendor Advisory