CVE-2009-0805 - Cross-site scripting (XSS) vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows remote attackers to inject arbitrary web script or HTML via the event_id parameter in index.php

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows remote attackers to inject arbitrary web script or HTML via the event_id parameter in index.php

Published Mar 4, 2009

4.3

MEDIUM

CVSS 2.0

EPSS 1.22%

Description

Cross-site scripting (XSS) vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows remote attackers to inject arbitrary web script or HTML via the event_id parameter in index.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (6)

http://jvn.jp/en/jp/JVN91591874/index.html
third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000013.html
third-party-advisoryx_refsource_JVNDB
http://secunia.com/advisories/33986
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/33896
vdb-entryx_refsource_BID
http://xoops.peak.ne.jp/md/news/
x_refsource_CONFIRMPatchVendor Advisory
http://xoops.peak.ne.jp/md/news/index.php?page=article&storyid=476&easiestml_lang=xlang%3Aen
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
http://jvn.jp/en/jp/JVN91591874/index.html		third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000013.html		third-party-advisoryx_refsource_JVNDB
http://secunia.com/advisories/33986		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/33896		vdb-entryx_refsource_BID
http://xoops.peak.ne.jp/md/news/		x_refsource_CONFIRMPatchVendor Advisory
http://xoops.peak.ne.jp/md/news/index.php?page=article&storyid=476&easiestml_lang=xlang%3Aen		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 4, 2009

Updated Sep 16, 2024

Reserved Mar 4, 2009

Link CVE-2009-0805

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-0805

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-0805