CVE-2009-2783: XSS
Published Aug 17, 2009
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) op parameter to modules/pm/viewpmsg.php and (2) query string to modules/profile/user.php.
Affected Software
1 affected component
Xoops Xoops=2.3.3
Remediation
Event History
Aug 17, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2783?
CVE-2009-2783 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2009-2783?
To fix CVE-2009-2783, update XOOPS to the latest version that addresses these XSS vulnerabilities.
3
What type of vulnerabilities are present in CVE-2009-2783?
CVE-2009-2783 contains multiple cross-site scripting (XSS) vulnerabilities.
4
Which software versions are affected by CVE-2009-2783?
CVE-2009-2783 specifically affects XOOPS version 2.3.3.
5
How can CVE-2009-2783 be exploited?
CVE-2009-2783 can be exploited by remote attackers injecting arbitrary web scripts or HTML through specific parameters.