CVE-2009-2780: XSS
Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to category.php, view parameter to (2) login.php and (3) viewlisting.php, page parameter to (4) searchresults.php and (5) toplistings.php, and (6) member parameter to viewmember.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2780?
CVE-2009-2780 is classified as a medium severity vulnerability due to its potential for remote code execution via cross-site scripting.
How do I fix CVE-2009-2780?
To fix CVE-2009-2780, sanitize user inputs and validate parameters in category.php, login.php, viewlisting.php, searchresults.php, and toplistings.php to prevent XSS attacks.
What are the affected systems for CVE-2009-2780?
CVE-2009-2780 affects the 68 Classifieds version 4.1 software.
What types of attacks can be executed using the vulnerabilities in CVE-2009-2780?
Attackers can perform cross-site scripting attacks that allow them to inject arbitrary web scripts or HTML, potentially leading to data theft or session hijacking.
Is there a patch available for CVE-2009-2780?
There is no specific patch provided for CVE-2009-2780, so applying input validation and sanitization in the code is crucial for remediation.