CVE-2009-4983

2010-08-2519:00:00

mitre

www.cve.org

cross-site scripting

silurus classifieds

remote attackers

web script injection

html injection

id parameter

category.php

wcategory.php

keywords parameter

search.php

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

56.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitrary web script or HTML via the ID parameter to (1) category.php and (2) wcategory.php, and the (3) keywords parameter to search.php.