CVE-2009-4460 - Multiple cross-site scripting (XSS) vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web script or HTML via the rid parameter to (1) index.php, (2) faq.php, and (3) register.php

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web script or HTML via the rid parameter to (1) index.php, (2) faq.php, and (3) register.php

Published Dec 30, 2009

4.3

MEDIUM

CVSS 2.0

EPSS 1.11%

Description

Multiple cross-site scripting (XSS) vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web script or HTML via the rid parameter to (1) index.php, (2) faq.php, and (3) register.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

http://osvdb.org/61285
vdb-entryx_refsource_OSVDB
http://osvdb.org/61286
vdb-entryx_refsource_OSVDB
http://osvdb.org/61287
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/37894
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/10616
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://osvdb.org/61285		vdb-entryx_refsource_OSVDB
http://osvdb.org/61286		vdb-entryx_refsource_OSVDB
http://osvdb.org/61287		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/37894		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/10616		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 30, 2009

Updated Aug 7, 2024

Reserved Dec 30, 2009

Link CVE-2009-4460

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-4460

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-4460