CVE-2009-4822 Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) do, (2) id, and (3) uname parameters.
MediumCVSS 4.3
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) do, (2) id, and (3) uname parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kasseler-cms kasseler cms | = 1.3.4 | No fix listed |
References
- 10581 exploit
- 37435 exploit vdb-entry
- kasselercms-multiple-xss(54953) vdb-entry