CVE-2009-2569

Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (VHCP) 1.7e allow remote attackers to inject arbitrary web script or HTML via (1) the nick parameter in a login action to index.php or (2) the URI in a news request to index.html.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
VendorProductVersion
verlihub-projectverlihub_control_panel
1.7e:e
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
verlihub
oneiric
dne
natty
dne
maverick
dne
lucid
dne
karmic
dne
jaunty
ignored
intrepid
ignored
hardy
ignored
dapper
dne
Common Weakness Enumeration
References
http://packetstorm.linuxsecurity.com/0905-exploits/verlihub-xss.txt
http://secunia.com/advisories/34941
http://www.securityfocus.com/bid/34856
http://www.vupen.com/english/advisories/2009/1264
http://packetstorm.linuxsecurity.com/0905-exploits/verlihub-xss.txt
http://secunia.com/advisories/34941
http://www.securityfocus.com/bid/34856
http://www.vupen.com/english/advisories/2009/1264