CVE-2009-3192 | BDVDB-2026-38500 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in index.php in LinkorCMS 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the searchstr parameter in a search action; or the (2) nikname, (3) realname, (4) homepage, or (5) city parameter in a registration action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/36487
http://packetstormsecurity.org/0908-exploits/linkorcms-xss.txt

Exploit#

No public exploit known

History#

Version 12009-09-15Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.