CVE-2009-1457 - Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter

Published Apr 28, 2009

4.3

MEDIUM

CVSS 2.0

EPSS 1.03%

Description

Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

http://osvdb.org/53779
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/34783
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/34594
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/49944
vdb-entryx_refsource_XF

Link	Providers	Tags
http://osvdb.org/53779		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/34783		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/34594		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/49944		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 28, 2009

Updated Aug 7, 2024

Reserved Apr 28, 2009

Link CVE-2009-1457

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-1457

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-1457