CVE-2009-3162

2009-09-1018:00:00

mitre

www.cve.org

vulnerability

multi website 1.5

remote attackers

inject web script

html

search parameter

default uri

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

56.5%

JSON

Cross-site scripting (XSS) vulnerability in Multi Website 1.5 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to the default URI.

References

packetstormsecurity.org/0908-exploits/multiwebsite-xss.txt

secunia.com/advisories/36107