CVE-2009-4547

2010-01-0417:00:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.079 Low

EPSS

Percentile

94.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the (1) category_id parameter to forums.php, or the forum_id parameter to (2) forum.php or (3) forum_topic_new.php.

References

osvdb.org/56883

osvdb.org/56884

osvdb.org/56885

packetstormsecurity.org/0908-exploits/viartcms-xss.txt

secunia.com/advisories/36241

www.securityfocus.com/bid/36003

exchange.xforce.ibmcloud.com/vulnerabilities/52371