CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-0934

Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 71.5%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2009-0934

Process-One » Ejabberd » Version: 0.9

cpe:2.3:a:process-one:ejabberd:0.9
Process-One » Ejabberd » Version: 0.9.1

cpe:2.3:a:process-one:ejabberd:0.9.1
Process-One » Ejabberd » Version: 0.9.8

cpe:2.3:a:process-one:ejabberd:0.9.8
Process-One » Ejabberd » Version: 1.0.0

cpe:2.3:a:process-one:ejabberd:1.0.0
Process-One » Ejabberd » Version: 1.1.0

cpe:2.3:a:process-one:ejabberd:1.1.0
Process-One » Ejabberd » Version: 1.1.1

cpe:2.3:a:process-one:ejabberd:1.1.1
Process-One » Ejabberd » Version: 1.1.1.0

cpe:2.3:a:process-one:ejabberd:1.1.1.0
Process-One » Ejabberd » Version: 1.1.1.1

cpe:2.3:a:process-one:ejabberd:1.1.1.1
Process-One » Ejabberd » Version: 1.1.14

cpe:2.3:a:process-one:ejabberd:1.1.14
Process-One » Ejabberd » Version: 1.1.2

cpe:2.3:a:process-one:ejabberd:1.1.2
Process-One » Ejabberd » Version: 1.1.3

cpe:2.3:a:process-one:ejabberd:1.1.3
Process-One » Ejabberd » Version: 2.0.0

cpe:2.3:a:process-one:ejabberd:2.0.0
Process-One » Ejabberd » Version: 2.0.1_2

cpe:2.3:a:process-one:ejabberd:2.0.1_2
Process-One » Ejabberd » Version: 2.0.2

cpe:2.3:a:process-one:ejabberd:2.0.2
Process-One » Ejabberd » Version: 2.0.3

cpe:2.3:a:process-one:ejabberd:2.0.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-0934

Products

Pricing

Contact Us