CVE-2009-3283

Cross-site scripting (XSS) vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot, dated before 20090914, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to cookies.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2009-09-22

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Php & Css Bbs (Phpspot)
• Php Bbs (Phpspot)
• Php Bbs Ce (Phpspot)
• Php Image Capture Bbs (Phpspot)
• Php Rss Builder (Phpspot)
• Webshot (Phpspot)

References

• http://jvn.jp/en/jp/JVN53591199/index.html
• http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000063.html
• http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html
• http://secunia.com/advisories/36783