Vulnerability Details CVE-2009-1776
Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via javascript: URIs in the (1) request and (2) return_link_url parameters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.7%
CVSS Severity
CVSS v2 Score 4.3
References
- http://secunia.com/advisories/35068
- http://www.securityfocus.com/archive/1/503446/100/0/threaded
- http://www.securityfocus.com/bid/34929
- http://www.ush.it/team/ush/hack-formmail_192/adv.txt
- http://secunia.com/advisories/35068
- http://www.securityfocus.com/archive/1/503446/100/0/threaded
- http://www.securityfocus.com/bid/34929
- http://www.ush.it/team/ush/hack-formmail_192/adv.txt
Products affected by CVE-2009-1776
-
cpe:2.3:a:matt_wright:formmail:*