CVE-2009-3171 | BDVDB-2026-38437 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter to user.php or (2) lookup parameter to search.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstormsecurity.org/0909-exploits/gazellecms-xss.txt
http://www.exploit-db.com/exploits/9425
http://www.vupen.com/english/advisories/2009/2541
http://secunia.com/advisories/33686
https://exchange.xforce.ibmcloud.com/vulnerabilities/52415

Exploit#

http://www.exploit-db.com/exploits/9425

History#

Version 12009-09-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.