CVE-2009-2162 Cross-site scripting (XSS) vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ishii pukiwikimod | <= 1.6.6.2 | No fix listed |
| ishii pukiwikimod | = 1.5.1 | No fix listed |
| ishii pukiwikimod | = 1.5.3 | No fix listed |
| ishii pukiwikimod | = 1.5.5 | No fix listed |
| ishii pukiwikimod | = 1.5.6 | No fix listed |
| ishii pukiwikimod | = 1.5.6.1 | No fix listed |
| ishii pukiwikimod | = 1.5.6.2 | No fix listed |
| ishii pukiwikimod | = 1.6.0.1 | No fix listed |
| ishii pukiwikimod | = 1.6.1 | No fix listed |
| ishii pukiwikimod | = 1.6.2 | No fix listed |
| ishii pukiwikimod | = 1.6.3 | No fix listed |
| ishii pukiwikimod | = 1.6.4 | No fix listed |
| ishii pukiwikimod | = 1.6.5 | No fix listed |
| ishii pukiwikimod | = 1.6.5.1 | No fix listed |
| ishii pukiwikimod | = 1.6.6 | No fix listed |
References
- JVN#12244807 third-party-advisory
- JVNDB-2009-000041 third-party-advisory
- 55189 vdb-entry
- 35504 third-party-advisory vendor-advisory
- xoops.hypweb.net vendor-advisory
- pukiwikimod-unspecified-xss(51260) vdb-entry