Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-4040
cve
2009
4040
cross-site scripting
xss
vulnerability
phpmyfaq
internet explorer
remote attackers
web script
html
search page
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
50.7%
Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page.
Affected configurations
Node
phpmyfaqphpmyfaqRange≤2.0.16
ORphpmyfaqphpmyfaqMatch0.60
ORphpmyfaqphpmyfaqMatch0.65
ORphpmyfaqphpmyfaqMatch0.70
ORphpmyfaqphpmyfaqMatch0.80
ORphpmyfaqphpmyfaqMatch0.80a
ORphpmyfaqphpmyfaqMatch0.85
ORphpmyfaqphpmyfaqMatch0.86
ORphpmyfaqphpmyfaqMatch0.87
ORphpmyfaqphpmyfaqMatch0.90
ORphpmyfaqphpmyfaqMatch0.95
ORphpmyfaqphpmyfaqMatch0.666
ORphpmyfaqphpmyfaqMatch1.0
ORphpmyfaqphpmyfaqMatch1.0.1
ORphpmyfaqphpmyfaqMatch1.0.1a
ORphpmyfaqphpmyfaqMatch1.1.0
ORphpmyfaqphpmyfaqMatch1.1.1
ORphpmyfaqphpmyfaqMatch1.1.2
ORphpmyfaqphpmyfaqMatch1.1.3
ORphpmyfaqphpmyfaqMatch1.1.4
ORphpmyfaqphpmyfaqMatch1.1.4a
ORphpmyfaqphpmyfaqMatch1.1.5
ORphpmyfaqphpmyfaqMatch1.2.0
ORphpmyfaqphpmyfaqMatch1.2.1
ORphpmyfaqphpmyfaqMatch1.2.2
ORphpmyfaqphpmyfaqMatch1.2.3
ORphpmyfaqphpmyfaqMatch1.2.4
ORphpmyfaqphpmyfaqMatch1.2.5
ORphpmyfaqphpmyfaqMatch1.2.5a
ORphpmyfaqphpmyfaqMatch1.2.5b
ORphpmyfaqphpmyfaqMatch1.3.0
ORphpmyfaqphpmyfaqMatch1.3.1
ORphpmyfaqphpmyfaqMatch1.3.2
ORphpmyfaqphpmyfaqMatch1.3.3
ORphpmyfaqphpmyfaqMatch1.3.4
ORphpmyfaqphpmyfaqMatch1.3.5
ORphpmyfaqphpmyfaqMatch1.3.6
ORphpmyfaqphpmyfaqMatch1.3.7
ORphpmyfaqphpmyfaqMatch1.3.8
ORphpmyfaqphpmyfaqMatch1.3.9
ORphpmyfaqphpmyfaqMatch1.3.9pl1
ORphpmyfaqphpmyfaqMatch1.3.10
ORphpmyfaqphpmyfaqMatch1.3.11
ORphpmyfaqphpmyfaqMatch1.3.12
ORphpmyfaqphpmyfaqMatch1.3.13
ORphpmyfaqphpmyfaqMatch1.3.14
ORphpmyfaqphpmyfaqMatch1.4
ORphpmyfaqphpmyfaqMatch1.4.0
ORphpmyfaqphpmyfaqMatch1.4.0a
ORphpmyfaqphpmyfaqMatch1.4.1
ORphpmyfaqphpmyfaqMatch1.4.2
ORphpmyfaqphpmyfaqMatch1.4.3
ORphpmyfaqphpmyfaqMatch1.4.4
ORphpmyfaqphpmyfaqMatch1.4.5
ORphpmyfaqphpmyfaqMatch1.4.6
ORphpmyfaqphpmyfaqMatch1.4.7
ORphpmyfaqphpmyfaqMatch1.4.8
ORphpmyfaqphpmyfaqMatch1.4.9
ORphpmyfaqphpmyfaqMatch1.4.10
ORphpmyfaqphpmyfaqMatch1.4.11
ORphpmyfaqphpmyfaqMatch1.4_alpha1
ORphpmyfaqphpmyfaqMatch1.4_alpha2
ORphpmyfaqphpmyfaqMatch1.4a
ORphpmyfaqphpmyfaqMatch1.5
ORphpmyfaqphpmyfaqMatch1.5rc1
ORphpmyfaqphpmyfaqMatch1.5rc2
ORphpmyfaqphpmyfaqMatch1.5rc3
ORphpmyfaqphpmyfaqMatch1.5rc4
ORphpmyfaqphpmyfaqMatch1.5rc5
ORphpmyfaqphpmyfaqMatch1.5.0
ORphpmyfaqphpmyfaqMatch1.5.1
ORphpmyfaqphpmyfaqMatch1.5.2
ORphpmyfaqphpmyfaqMatch1.5.3
ORphpmyfaqphpmyfaqMatch1.5.4
ORphpmyfaqphpmyfaqMatch1.5.5
ORphpmyfaqphpmyfaqMatch1.5.6
ORphpmyfaqphpmyfaqMatch1.5.7
ORphpmyfaqphpmyfaqMatch1.5.8
ORphpmyfaqphpmyfaqMatch1.5.9
ORphpmyfaqphpmyfaqMatch1.5_alpha1
ORphpmyfaqphpmyfaqMatch1.5_alpha2
ORphpmyfaqphpmyfaqMatch1.5_beta1
ORphpmyfaqphpmyfaqMatch1.5_beta2
ORphpmyfaqphpmyfaqMatch1.5_beta3
ORphpmyfaqphpmyfaqMatch1.6.0
ORphpmyfaqphpmyfaqMatch1.6.1
ORphpmyfaqphpmyfaqMatch1.6.2
ORphpmyfaqphpmyfaqMatch1.6.3
ORphpmyfaqphpmyfaqMatch1.6.4
ORphpmyfaqphpmyfaqMatch1.6.5
ORphpmyfaqphpmyfaqMatch1.6.6
ORphpmyfaqphpmyfaqMatch1.6.7
ORphpmyfaqphpmyfaqMatch1.6.8
ORphpmyfaqphpmyfaqMatch1.6.9
ORphpmyfaqphpmyfaqMatch1.6.10
ORphpmyfaqphpmyfaqMatch1.6.11
ORphpmyfaqphpmyfaqMatch1.6.12
ORphpmyfaqphpmyfaqMatch2.0.0
ORphpmyfaqphpmyfaqMatch2.0.1
ORphpmyfaqphpmyfaqMatch2.0.2
ORphpmyfaqphpmyfaqMatch2.0.3
ORphpmyfaqphpmyfaqMatch2.0.4
ORphpmyfaqphpmyfaqMatch2.0.5
ORphpmyfaqphpmyfaqMatch2.0.6
ORphpmyfaqphpmyfaqMatch2.0.7
ORphpmyfaqphpmyfaqMatch2.0.8
ORphpmyfaqphpmyfaqMatch2.0.9
ORphpmyfaqphpmyfaqMatch2.0.10
ORphpmyfaqphpmyfaqMatch2.0.11
ORphpmyfaqphpmyfaqMatch2.0.12
ORphpmyfaqphpmyfaqMatch2.0.13
ORphpmyfaqphpmyfaqMatch2.0.14
ORphpmyfaqphpmyfaqMatch2.0.15
ORphpmyfaqphpmyfaqMatch2.5.0
ORphpmyfaqphpmyfaqMatch2.5.1
microsoftinternet_explorerMatch6
ORmicrosoftinternet_explorerMatch7
Related
openvas
openvas
phpMyFAQ GET Variable Cross-Site-Scripting Vulnerability
2009-11-26 00:00:00
phpMyFAQ Search Page Cross Site Scripting Vulnerability
2009-11-16 00:00:00
phpMyFAQ GET Variable Cross-Site-Scripting Vulnerability
2009-11-26 00:00:00
nvd
nvd
CVE-2009-4040
2009-11-20 19:30:00
prion
prion
Cross site scripting
2009-11-20 19:30:00
cvelist
cvelist
CVE-2009-4040
2022-10-03 16:24:02
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
50.7%
Related for CVE-2009-4040