CVEvulnerability
CVE-2009-4690
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-03-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rate.php and (2) postcomments.php.
Affected configurations
• yourfreeworld programs rating script
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/56076 osvdb.org
- http://osvdb.org/56077 osvdb.org
- http://packetstormsecurity.org/0907-exploits/programsrating-xss.txt Exploit
- http://secunia.com/advisories/35918 Vendor Advisory
- http://www.securityfocus.com/bid/35746 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1967 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51880 exchange.xforce.ibmcloud.com
- http://osvdb.org/56076 osvdb.org
- http://osvdb.org/56077 osvdb.org
- http://packetstormsecurity.org/0907-exploits/programsrating-xss.txt Exploit
- http://secunia.com/advisories/35918 Vendor Advisory
- http://www.securityfocus.com/bid/35746 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1967 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51880 exchange.xforce.ibmcloud.com