CVE-2009-4983 Multiple cross-site scripting (XSS) vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitrary web script or HTML via the ID parameter to (1) category.php and (2) wcategory....
MediumCVSS 4.3
EPSS 1.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitrary web script or HTML via the ID parameter to (1) category.php and (2) wcategory.php, and the (3) keywords parameter to search.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| snowhall silurus system | = 1.0 | No fix listed |
References
- packetstormsecurity.org exploit
- 36124 third-party-advisory vendor-advisory