CVE-2009-4984

Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Keywords parameter to search.php and (2) SearchIndex parameter to browse.php.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.27% chance of exploitation in the next 30 days, 68th percentile

Published

2010-08-25

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/9370

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/9370

References

• CVE Record
• NVD entry

Related

• CVE-2009-4983
• CVE-2009-4985
• CVE-2009-4982
• CVE-2009-4986
• CVE-2009-4978
• CVE-2009-4987