XSS in 53kf Web Im 2009
CVE-2009-0247
The server for 53KF Web IM 2009 Home, Professional, and Enterprise editions relies on client-side protection mechanisms against cross-site scripting (XSS), which allows remote attackers to conduct XSS attacks by using a modified client to send a crafted IM message, related to the msg variable.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.010 (59.9th percentile) — read the EPSS interpretation.
Affected products
- 53kf Web_im_2009 — versions _nil_
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)