CVE-2009-3225

Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, allow remote attackers to inject arbitrary web script or HTML via (1) the page parameter in a browse action to index.php or (2) the addr parameter to gmap.php. NOTE: some of these details are obtained from third party information.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:almondsoft:almond_classifieds:*:*:pro:*:*:*:*:*
cpe:2.3:a:almondsoft:almond_classifieds:*:*:wap:*:*:*:*:*

History

No history.

Information

Published : 2009-09-16 19:30

Updated : 2024-02-04 17:33


NVD link : CVE-2009-3225

Mitre link : CVE-2009-3225

CVE.ORG link : CVE-2009-3225


JSON object : View

Products Affected

almondsoft

  • almond_classifieds
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')