CVE-2009-2785

Multiple cross-site scripting (XSS) vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter to buy.php and the id parameter to (2) contact.php and (3) tellafriend.php.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 65%
VendorProductVersion
classifiedphpscriptphp_open_classifieds_script
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/56657
http://osvdb.org/56658
http://osvdb.org/56659
http://packetstormsecurity.org/0907-exploits/openclassifieds-xss.txt
http://secunia.com/advisories/35929
https://exchange.xforce.ibmcloud.com/vulnerabilities/52123
http://osvdb.org/56657
http://osvdb.org/56658
http://osvdb.org/56659
http://packetstormsecurity.org/0907-exploits/openclassifieds-xss.txt
http://secunia.com/advisories/35929
https://exchange.xforce.ibmcloud.com/vulnerabilities/52123