CVE-2009-2919

2009-08-2111:30:00

CWE-79

web.nvd.nist.gov

cve-2009-2919

cross-site scripting

xss

boonex orca 2.0

orca 2.0.2

remote authenticated users

web script injection

html injection

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.6%

CPENameOperatorVersion
boonex:orcaboonex orcaeq2.0
boonex:orcaboonex orcaeq2.0.2

CPE	Name	Operator	Version
boonex:orca	boonex orca	eq	2.0
boonex:orca	boonex orca	eq	2.0.2

References

securityreason.com/exploitalert/5644

www.securityfocus.com/bid/33545

exchange.xforce.ibmcloud.com/vulnerabilities/48434