XSS in Snowhall Silurus System

CVE-2009-4983

Multiple cross-site scripting (XSS) vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitrary web script or HTML via the ID parameter to (1) category.php and (2) wcategory.php, and the (3) keywords parameter to search.php.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.013 (67.3th percentile) — read the EPSS interpretation.

Affected products

Snowhall Silurus_system — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)