← Voltar para CVEs
CVE-2009-2440
N/ADescricao
Cross-site scripting (XSS) vulnerability in index.php in JNM Guestbook 3.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Detalhes CVE
Pontuacao CVSS v3.1N/A
Publicado7/13/2009
Ultima modificacao4/23/2026
Fontenvd
Avistamentos honeypot0
Produtos afetados
jnmsolutions:guestbook
Fraquezas (CWE)
CWE-79
Referencias
http://packetstormsecurity.org/0907-exploits/jnm-xss.txt(cve@mitre.org)
http://secunia.com/advisories/35760(cve@mitre.org)
http://www.vupen.com/english/advisories/2009/1831(cve@mitre.org)
http://packetstormsecurity.org/0907-exploits/jnm-xss.txt(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/35760(af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2009/1831(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.