CVE-2009-0541

Multiple cross-site scripting (XSS) vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the username field in an admin/ request to index.php, possibly related to the login[username] parameter and the app/code/core/Mage/Admin/Model/Session.php login function; (2) the email address field in an admin/index/forgotpassword/ request to index.php, possibly related to the email parameter and the app/code/core/Mage/Adminhtml/controllers/IndexController.php forgotpasswordAction function; or (3) the return parameter to the default URI under downloader/.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.81% chance of exploitation in the next 30 days, 77th percentile

Published

2009-02-25

Updated

2024-08-07

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/32810
• https://www.exploit-db.com/exploits/32809
• https://www.exploit-db.com/exploits/32808

References

• CVE Record
• NVD entry

Related

• CVE-2009-0537
• CVE-2009-0542
• CVE-2009-0535
• CVE-2009-0543
• CVE-2009-0534
• CVE-2009-0544