CVE-2009-1281 - Cross-site scripting (XSS) vulnerability in glFusion before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in glFusion before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

Published Apr 9, 2009

4.3

MEDIUM

CVSS 2.0

EPSS 1.49%

Description

Cross-site scripting (XSS) vulnerability in glFusion before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

http://osvdb.org/53287
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/34575
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.glfusion.org/article.php/glfusion113
x_refsource_CONFIRMPatchVendor Advisory
http://www.securityfocus.com/bid/34377
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1279
Advisory

Link	Providers	Tags
http://osvdb.org/53287		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/34575		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.glfusion.org/article.php/glfusion113		x_refsource_CONFIRMPatchVendor Advisory
http://www.securityfocus.com/bid/34377		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1279		Advisory