CVE-2009-4852 Multiple cross-site scripting (XSS) vulnerabilities in SemanticScuttle before 0.94.1 allow remote attackers to inject arbitrary web script or HTML via the sort parameter to index.php, and other unspec...
MediumCVSS 4.3
EPSS 0.85%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in SemanticScuttle before 0.94.1 allow remote attackers to inject arbitrary web script or HTML via the sort parameter to index.php, and other unspecified vectors, a different issue than CVE-2008-6113. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| festic semanticscuttle | <= 0.94 | No fix listed |
| festic semanticscuttle | = 0.85 | No fix listed |
| festic semanticscuttle | = 0.86 | No fix listed |
| festic semanticscuttle | = 0.87 | No fix listed |
| festic semanticscuttle | = 0.88 | No fix listed |
| festic semanticscuttle | = 0.89 | No fix listed |
| festic semanticscuttle | = 0.90 | No fix listed |
| festic semanticscuttle | = 0.91 | No fix listed |
| festic semanticscuttle | = 0.92 | No fix listed |
| festic semanticscuttle | = 0.93 | No fix listed |
References
- 37387 third-party-advisory vendor-advisory
- semanticscuttle.svn.sourceforge.net