CVEvulnerability
CVE-2009-4984
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-08-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Keywords parameter to search.php and (2) SearchIndex parameter to browse.php.
Affected configurations
• websitesrus accessories me php affiliate script 1.4
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/36148 Vendor Advisory
- http://www.exploit-db.com/exploits/9370 www.exploit-db.com
- http://secunia.com/advisories/36148 Vendor Advisory
- http://www.exploit-db.com/exploits/9370 www.exploit-db.com