CVE-2009-2107

2009-06-1717:30:00

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

57.2%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Webmedia Explorer (webmex) 5.09 and 5.10 allow remote attackers to inject arbitrary web script or HTML via event handlers such as onmouseover in the (1) search or (2) tag parameters; (3) arbitrary invalid parameter names that are not properly handled when triggered on a column; (4) bookmark parameter in an edit action; or (5) email parameter in a remember action.

Affected configurations

Nvd

Node

webmediaexplorerwebmedia_explorerMatch5.09

webmediaexplorerwebmedia_explorerMatch5.10

VendorProductVersionCPE
webmediaexplorerwebmedia_explorer5.09cpe:2.3:a:webmediaexplorer:webmedia_explorer:5.09:*:*:*:*:*:*:*
webmediaexplorerwebmedia_explorer5.10cpe:2.3:a:webmediaexplorer:webmedia_explorer:5.10:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
webmediaexplorer	webmedia_explorer	5.09	cpe:2.3:a:webmediaexplorer:webmedia_explorer:5.09:::::::*
webmediaexplorer	webmedia_explorer	5.10	cpe:2.3:a:webmediaexplorer:webmedia_explorer:5.10:::::::*