CVE-2009-3171

2009-09-1120:00:00

mitre

www.cve.org

AI Score

5.8

Confidence

High

EPSS

0.004

Percentile

72.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter to user.php or (2) lookup parameter to search.php.

References

packetstormsecurity.org/0909-exploits/gazellecms-xss.txt

secunia.com/advisories/33686

www.exploit-db.com/exploits/9425

www.vupen.com/english/advisories/2009/2541

exchange.xforce.ibmcloud.com/vulnerabilities/52415