Vulnerability Details CVE-2009-4083
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.16 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) submitnews.php, (2) usersettings.php; and (3) newpost.php, (4) banlist.php, (5) banner.php, (6) cpage.php, (7) download.php, (8) users_extended.php, (9) frontpage.php, (10) links.php, and (11) mailout.php in e107_admin/. NOTE: this may overlap CVE-2004-2040 and CVE-2006-4794, but there are insufficient details to be certain.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.6%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2009-4083
-
-
cpe:2.3:a:e107:e107:0.545
-
cpe:2.3:a:e107:e107:0.547_beta
-
cpe:2.3:a:e107:e107:0.548_beta
-
cpe:2.3:a:e107:e107:0.549_beta
-
cpe:2.3:a:e107:e107:0.551_beta
-
cpe:2.3:a:e107:e107:0.552_beta
-
cpe:2.3:a:e107:e107:0.553_beta
-
cpe:2.3:a:e107:e107:0.554
-
cpe:2.3:a:e107:e107:0.554_beta
-
cpe:2.3:a:e107:e107:0.555_beta
-
cpe:2.3:a:e107:e107:0.600
-
cpe:2.3:a:e107:e107:0.601
-
cpe:2.3:a:e107:e107:0.602
-
cpe:2.3:a:e107:e107:0.603
-
cpe:2.3:a:e107:e107:0.604
-
cpe:2.3:a:e107:e107:0.605
-
cpe:2.3:a:e107:e107:0.606
-
cpe:2.3:a:e107:e107:0.607
-
cpe:2.3:a:e107:e107:0.608
-
cpe:2.3:a:e107:e107:0.609
-
cpe:2.3:a:e107:e107:0.610
-
cpe:2.3:a:e107:e107:0.611
-
cpe:2.3:a:e107:e107:0.612
-
cpe:2.3:a:e107:e107:0.613
-
cpe:2.3:a:e107:e107:0.614
-
cpe:2.3:a:e107:e107:0.615
-
cpe:2.3:a:e107:e107:0.615a
-
cpe:2.3:a:e107:e107:0.616
-
cpe:2.3:a:e107:e107:0.617
-
cpe:2.3:a:e107:e107:0.6171
-
cpe:2.3:a:e107:e107:0.6172
-
cpe:2.3:a:e107:e107:0.6173
-
cpe:2.3:a:e107:e107:0.6174
-
cpe:2.3:a:e107:e107:0.6175
-
cpe:2.3:a:e107:e107:0.6_10
-
cpe:2.3:a:e107:e107:0.6_11
-
cpe:2.3:a:e107:e107:0.6_12
-
cpe:2.3:a:e107:e107:0.6_13
-
cpe:2.3:a:e107:e107:0.6_14
-
cpe:2.3:a:e107:e107:0.6_15
-
cpe:2.3:a:e107:e107:0.6_15a
-
-
cpe:2.3:a:e107:e107:0.7.0
-
cpe:2.3:a:e107:e107:0.7.1
-
cpe:2.3:a:e107:e107:0.7.10
-
cpe:2.3:a:e107:e107:0.7.11
-
cpe:2.3:a:e107:e107:0.7.12
-
cpe:2.3:a:e107:e107:0.7.13
-
cpe:2.3:a:e107:e107:0.7.14
-
cpe:2.3:a:e107:e107:0.7.15
-
cpe:2.3:a:e107:e107:0.7.16
-
cpe:2.3:a:e107:e107:0.7.2
-
cpe:2.3:a:e107:e107:0.7.3
-
cpe:2.3:a:e107:e107:0.7.4
-
cpe:2.3:a:e107:e107:0.7.5
-
cpe:2.3:a:e107:e107:0.7.6
-
cpe:2.3:a:e107:e107:0.7.7
-
cpe:2.3:a:e107:e107:0.7.8
-
cpe:2.3:a:e107:e107:0.7.9