CVEvulnerability
CVE-2009-4888
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-06-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in poster.php in PHortail 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) ti, and (4) txt parameters.
Affected configurations
• nskate phortail 1.2.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/52502 osvdb.org
- http://packetstormsecurity.org/0903-exploits/phortail-xss.txt Exploit
- http://secunia.com/advisories/34203 Vendor Advisory
- http://www.securityfocus.com/bid/34038 Exploit
- http://www.vupen.com/english/advisories/2009/0631 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49143 exchange.xforce.ibmcloud.com
- http://osvdb.org/52502 osvdb.org
- http://packetstormsecurity.org/0903-exploits/phortail-xss.txt Exploit
- http://secunia.com/advisories/34203 Vendor Advisory
- http://www.securityfocus.com/bid/34038 Exploit
- http://www.vupen.com/english/advisories/2009/0631 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49143 exchange.xforce.ibmcloud.com