CVE-2009-2551

2009-07-2019:25:00

mitre

www.cve.org

5.9 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject arbitrary web script or HTML via the id parameter in a detail action to (1) main.php and possibly (2) demo_page.php.

References

osvdb.org/55862

packetstormsecurity.org/0907-exploits/eid-xss.txt

secunia.com/advisories/35838

www.securityfocus.com/bid/35701

exchange.xforce.ibmcloud.com/vulnerabilities/51722