VulnerabilityModified
CVE-2009-4690
Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rate.php and (2) postcomments.php.
MEDIUM 4.3EPSS 1.88%
Does this matter?
Lower severity and a low EPSS score (1.88%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rate.php and (2) postcomments.php.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.88% probability · 78th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- yourfreeworld/programs rating script
- Source
- cve@mitre.org
References
- http://osvdb.org/56076
- http://osvdb.org/56077
- http://packetstormsecurity.org/0907-exploits/programsrating-xss.txtExploit
- http://secunia.com/advisories/35918Vendor Advisory
- http://www.securityfocus.com/bid/35746
- http://www.vupen.com/english/advisories/2009/1967Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51880
- http://osvdb.org/56076
- http://osvdb.org/56077
- http://packetstormsecurity.org/0907-exploits/programsrating-xss.txtExploit
- http://secunia.com/advisories/35918Vendor Advisory
- http://www.securityfocus.com/bid/35746
- http://www.vupen.com/english/advisories/2009/1967Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51880
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.