CVE-2009-4469

2009-12-3020:00:00

mitre

www.cve.org

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

57.2%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, the (2) archiv parameter, and the (3) subcat parameter.

References

www.exploit-db.com/exploits/10668

www.securityfocus.com/bid/37508

exchange.xforce.ibmcloud.com/vulnerabilities/55059