NVD

Id
50010  
Name
CVE-2009-2785  
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter to buy.php and the id parameter to (2) contact.php and (3) tellafriend.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-08-17  
Modified Date
2009-08-17  
Seq
2009-2785  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253037 50010 CVE-2009-2785 http://packetstormsecurity.org/0907-exploits/openclassifieds-xss.txt  View
253038 50010 CVE-2009-2785 phpopenclassifieds-buy-contact-xss(52123)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42671 JVNDB-2009-003678 PHP Open Classifieds Script におけるクロスサイトスクリプティングの脆弱性 PHP Open Classifieds Script には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-2785 40216 CVE-2009-2785 50010 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003678.html 2009-08-17 2012-06-26 View