Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-4714

EPSS 1.01% · P77
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-4714

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to cadastro_usuario.php.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
XOOPS Celepar quiz模块跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
XOOPS是一个开放源代码的内容管理系统。 XOOPS Celepar的quiz模块存在跨站脚本攻击漏洞。远程攻击者可以借助脚本cadastro_usuario.php的PATH_INFO参数，执行跨站脚本攻击，注入任意的web脚本和HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-4714

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-4714

请登录查看更多情报信息。

Same Patch Batch · n/a · 2010-03-15 · 21 CVEs total

CVE-2009-4708TYPO3 [Gobernalia] Front End News Submitter扩展件SQL注入漏洞
CVE-2009-4718Gonafish WebStatCaffe 'visitorduration.php'SQL注入漏洞
CVE-2009-4717Gonafish WebStatCaffe多个跨站脚本攻击漏洞
CVE-2009-4716EDGEPHP EZWebSearch 'results.php'跨站脚本攻击漏洞
CVE-2009-4715PHP Scripts Now Real Time Currency Exchange 'rates.php'跨站脚本攻击漏洞
CVE-2009-4713XOOPS Celepar Qas模块多个跨站脚本攻击漏洞
CVE-2009-4712Tukanas Classifieds Script 'index.php'SQL注入漏洞
CVE-2009-4711TYPO3 CoolURI扩展件SQL注入漏洞
CVE-2009-4710TYPO3 Reset backend password扩展件SQL注入漏洞
CVE-2009-4709TYPO3 datamints Newsticker)扩展件SQL注入漏洞
CVE-2009-4698CELEPAR Xoops Celepar 模块多个SQL注入漏洞
CVE-2009-4707TYPO3 [Gobernalia] Front End News Submitter扩展件跨站脚本攻击漏洞
CVE-2009-4706TYPO3 Mailform扩展件跨站脚本攻击漏洞
CVE-2009-4705TYPO3 Twitter Search扩展件跨站脚本攻击漏洞
CVE-2009-4704TYPO3 Webesse E-Card扩展件未明漏洞
CVE-2009-4703TYPO3 Webesse Image Gallery扩展件SQL注入漏洞
CVE-2009-4702TYPO3 Tour Extension扩展件SQL注入漏洞
CVE-2009-4701TYPO3 Myth download扩展件SQL注入漏洞
CVE-2009-4700SkaDate Dating 'index.php'目录遍历漏洞
CVE-2009-4699SkaDate Dating 多个跨站脚本攻击漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-4714

No comments yet

Leave a comment