Lucene search
PRIOn knowledge basePRION:CVE-2009-4249HistoryDec 10, 2009 - 12:30 a.m.
Cross site scripting
2009-12-1000:30:00
PRIOn knowledge base
www.prio-n.com
1
Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the (1) lastusername and (2) mod parameters to index.php; and (3) the title parameter to search.php.
References
www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt
www.securityfocus.com/archive/1/507782/100/0/threaded
www.securityfocus.com/bid/36971
exchange.xforce.ibmcloud.com/vulnerabilities/54219
exchange.xforce.ibmcloud.com/vulnerabilities/54220
exchange.xforce.ibmcloud.com/vulnerabilities/54222
Related
cvelist
cvelist
CVE-2009-4249
2009-12-10 00:00:00
cve
cve
CVE-2009-4249
2009-12-10 00:30:00
nvd
nvd
CVE-2009-4249
2009-12-10 00:30:00
openvas
openvas
CuteNews/UTF-8 CuteNews Multiple Vulnerabilities
2009-12-08 00:00:00
CuteNews/UTF-8 CuteNews Multiple Vulneablities
2009-12-08 00:00:00