Lucene search
MitreCVELIST:CVE-2009-4249HistoryDec 10, 2009 - 12:00 a.m.
CVE-2009-4249
2009-12-1000:00:00
mitre
www.cve.org
5
Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the (1) lastusername and (2) mod parameters to index.php; and (3) the title parameter to search.php.
References
www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt
www.securityfocus.com/archive/1/507782/100/0/threaded
www.securityfocus.com/bid/36971
exchange.xforce.ibmcloud.com/vulnerabilities/54219
exchange.xforce.ibmcloud.com/vulnerabilities/54220
exchange.xforce.ibmcloud.com/vulnerabilities/54222
Related
exploitdb
exploitdb
CuteNews 1.4.6 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities
2009-11-10 00:00:00
CuteNews and UTF-8 CuteNews - Multiple Vulnerabilities
2009-11-10 00:00:00
prion
prion
Cross site scripting
2009-12-10 00:30:00
nvd
nvd
CVE-2009-4249
2009-12-10 00:30:00
cve
cve
CVE-2009-4249
2009-12-10 00:30:00
openvas
openvas
CuteNews/UTF-8 CuteNews Multiple Vulnerabilities
2009-12-08 00:00:00
CuteNews/UTF-8 CuteNews Multiple Vulneablities
2009-12-08 00:00:00