CVE-2009-4093

Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) cname (Name) or (2) email parameters.
Configurations

Configuration 1 (hide)

cpe:2.3:a:simplog:simplog:0.9.3.2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2009-11-29 13:07

Updated : 2024-02-04 17:33


NVD link : CVE-2009-4093

Mitre link : CVE-2009-4093

CVE.ORG link : CVE-2009-4093


JSON object : View

Products Affected

simplog

  • simplog
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')