Lucene search

K
cvelistMitreCVELIST:CVE-2009-4172
HistoryDec 02, 2009 - 7:00 p.m.

CVE-2009-4172

2009-12-0219:00:00
mitre
www.cve.org

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.3%

Cross-site scripting (XSS) vulnerability in index.php in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews 8 and 8b, when magic_quotes_gpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the body of a news article in an addnews action.

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.3%

Related for CVELIST:CVE-2009-4172