CVE-2009-4729 — Multiple cross-site scripting (XSS) vulnerabilities in x10 Adult Media Script 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) pic_id parameter to includes/video_ad.php, (2) category parameter to linkvideos_listing.php, (3) id parameter to templates/header1.php, and (4) key parameter to video_listing.php

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in x10 Adult Media Script 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) pic_id parameter to includes/video_ad.php, (2) category parameter to linkvideos_listing.php, (3) id parameter to templates/header1.php, and (4) key parameter to video_listing.php

Published Mar 18, 2010

4.3

MEDIUM

CVSS 2.0

EPSS 3.63%

Description

Multiple cross-site scripting (XSS) vulnerabilities in x10 Adult Media Script 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) pic_id parameter to includes/video_ad.php, (2) category parameter to linkvideos_listing.php, (3) id parameter to templates/header1.php, and (4) key parameter to video_listing.php.

Affected products

Remediation

No remediation recorded yet.

Metrics

3.63% 0.03631

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.03631

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	3.63% (0.03631)	89.19th	v5 (v2026.06.15)
Jun 15, 2026	3.63% (0.03631)	88.03th	v5 (v2026.06.15)
Mar 17, 2025	1.62% (0.01615)	80.52th	v4 (v2025.03.14)
Dec 12, 2024	0.27% (0.00265)	66.63th	v3 (v2023.03.01)
Feb 8, 2024	0.27% (0.00265)	65.20th	v3 (v2023.03.01)
Mar 7, 2023	0.27% (0.00265)	62.33th	v3 (v2023.03.01)
Mar 6, 2023	1.32% (0.01319)	71.27th	v2 (v2022.01.01)
Feb 23, 2023	1.32% (0.01319)	71.23th	v2 (v2022.01.01)
Apr 1, 2022	1.32% (0.01319)	69.22th	v2 (v2022.01.01)
Feb 4, 2022	1.32% (0.01319)	44.98th	v2 (v2022.01.01)

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (7)

http://secunia.com/advisories/36067
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/9340
exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/56671
vdb-entryx_refsource_OSVDB
http://www.osvdb.org/56672
vdb-entryx_refsource_OSVDB
http://www.osvdb.org/56673
vdb-entryx_refsource_OSVDB
http://www.osvdb.org/56674
vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/52163
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/36067		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/9340		exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/56671		vdb-entryx_refsource_OSVDB
http://www.osvdb.org/56672		vdb-entryx_refsource_OSVDB
http://www.osvdb.org/56673		vdb-entryx_refsource_OSVDB
http://www.osvdb.org/56674		vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/52163		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 18, 2010

Updated Aug 7, 2024

Reserved Mar 18, 2010

Link CVE-2009-4729

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-4729

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-4729