Vulnerability Details CVE-2009-2893
Multiple cross-site scripting (XSS) vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbitrary web script or HTML via (1) the postevent parameter in a post action or (2) the _xzcal_y parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.8%
CVSS Severity
CVSS v2 Score 4.3
References
- http://packetstormsecurity.org/0907-exploits/xzero-xss.txt
- http://secunia.com/advisories/35996
- http://www.securityfocus.com/bid/35809
- http://www.vupen.com/english/advisories/2009/2010
- http://packetstormsecurity.org/0907-exploits/xzero-xss.txt
- http://secunia.com/advisories/35996
- http://www.securityfocus.com/bid/35809
- http://www.vupen.com/english/advisories/2009/2010
Products affected by CVE-2009-2893
-
cpe:2.3:a:xzeroscripts:xzero_community_classifieds:4.97.8