CVE-2009-2783

🗓️ 17 Aug 2009 16:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 44 Views🌐 WEB

Multiple XSS vulnerabilities in XOOPS 2.3.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2009-2783	30 Jun 200900:00	–	circl
Cvelist	CVE-2009-2783	17 Aug 200916:00	–	cvelist
EUVD	EUVD-2009-2773	7 Oct 202500:30	–	euvd
NVD	CVE-2009-2783	17 Aug 200916:30	–	nvd
Prion	Cross site scripting	17 Aug 200916:30	–	prion
Positive Technologies	PT-2009-5147 · Xoops · Xoops	17 Aug 200900:00	–	ptsecurity
RedhatCVE	CVE-2009-2783	22 May 202500:04	–	redhatcve

NVD

Node

xoops xoopsMatch2.3.3

Source	Link
senseofsecurity	www.senseofsecurity.com.au/advisories/SOS-09-005.pdf
osvdb	www.osvdb.org/56638
securitytracker	www.securitytracker.com/id
xoops	www.xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/trunk/htdocs/modules/pm/viewpmsg.php
secunia	www.secunia.com/advisories/36109
marc	www.marc.info/
securityfocus	www.securityfocus.com/bid/35895
xoops	www.xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/trunk/htdocs/modules/pm/viewpmsg.php

Parameter	Position	Path	Description	CWE
op	query param	modules/pm/viewpmsg.php	XSS vulnerability via op parameter in modules/pm/viewpmsg.php	CWE-79
query_string	query param	modules/profile/user.php	XSS vulnerability via query string in modules/profile/user.php	CWE-79

23 Apr 2026 00:35Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.3

EPSS0.07274

xss cross-site scripting vulnerabilities xoops 2.3.3 nvd