CVEvulnerability
CVE-2009-4320
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-12-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in searchform.php in The Next Generation of Genealogy Sitebuilding (TNG) 7.1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Affected configurations
• lythgoes the next generation of genealogy sitebuilding 7.1.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/37711 Vendor Advisory
- http://www.exploit-db.com/exploits/10387 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54726 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/37711 Vendor Advisory
- http://www.exploit-db.com/exploits/10387 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54726 exchange.xforce.ibmcloud.com