CVE-2009-4087

Cross-site scripting (XSS) vulnerability in index.php in telepark.wiki 2.4.23 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
VendorProductVersion
teleparktelepark.wiki
𝑥
≤ 2.4.23
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/
http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt
http://secunia.com/advisories/37391
http://www.osvdb.org/60213
https://exchange.xforce.ibmcloud.com/vulnerabilities/54293
http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/
http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt
http://secunia.com/advisories/37391
http://www.osvdb.org/60213
https://exchange.xforce.ibmcloud.com/vulnerabilities/54293