NVD

Id
51529  
Name
CVE-2009-4406  
Description
Cross-site scripting (XSS) vulnerability in Forms/login1 in American Power Conversion (APC) Switched Rack PDU AP7932 B2, running rpdu 3.3.3 or 3.7.0 on AOS 3.3.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the login_username parameter.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-12-23  
Modified Date
2009-12-28  
Seq
2009-4406  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
261294 51529 CVE-2009-4406 http://www.packetstormsecurity.org/0912-exploits/apc-xss.txt  View
261295 51529 CVE-2009-4406 20091214 APC Switched Rack PDU XSS Vulnerability  View
261296 51529 CVE-2009-4406 37338  View
261297 51529 CVE-2009-4406 1023331  View
261298 51529 CVE-2009-4406 switchedrackpdu-ap7932-login1-xss(54824)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41507 JVNDB-2009-002514 APC Switched Rack PDU におけるクロスサイトスクリプティングの脆弱性 APC Switched Rack PDU で稼働している AOS 3.3.4 上の rpdu 3.3.3、または 3.7.0 には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4406 41837 CVE-2009-4406 51529 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002514.html 2009-12-23 2010-03-12 View