CVE-2009-4093 | BDVDB-2026-39404 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) cname (Name) or (2) email parameters.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/21390
http://www.exploit-db.com/exploits/10180
https://exchange.xforce.ibmcloud.com/vulnerabilities/54353
http://www.securityfocus.com/bid/37063

Exploit#

http://www.exploit-db.com/exploits/10180

History#

Version 12009-11-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.