CVE-2009-2947: XSS
Published Sep 14, 2009
·Updated
Cross-site scripting (XSS) vulnerability in Xapian Omega before 1.0.16 allows remote attackers to inject arbitrary web script or HTML via unspecified CGI parameter values, which are sometimes included in exception messages.
Affected Software
32 affected components
Xapian Omega<=1.0.15
Xapian Omega=0.8.0
Xapian Omega=0.8.1
Xapian Omega=0.8.2
Xapian Omega=0.8.3
Xapian Omega=0.8.4
Xapian Omega=0.8.5
Xapian Omega=0.9.0
Xapian Omega=0.9.1
Xapian Omega=0.9.2
Xapian Omega=0.9.3
Xapian Omega=0.9.4
Xapian Omega=0.9.5
Xapian Omega=0.9.6
Xapian Omega=0.9.7
Xapian Omega=0.9.8
Xapian Omega=0.9.9
Xapian Omega=0.9.10
Xapian Omega=1.0.0
Xapian Omega=1.0.2
Xapian Omega=1.0.3
Xapian Omega=1.0.4
Xapian Omega=1.0.5
Xapian Omega=1.0.6
Xapian Omega=1.0.7
Xapian Omega=1.0.8
Xapian Omega=1.0.9
Xapian Omega=1.0.10
Xapian Omega=1.0.11
Xapian Omega=1.0.12
Xapian Omega=1.0.13
Xapian Omega=1.0.14
Event History
Sep 14, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2947?
CVE-2009-2947 has a medium severity level due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2009-2947?
To fix CVE-2009-2947, upgrade Xapian Omega to version 1.0.16 or later.
3
Which versions of Xapian Omega are affected by CVE-2009-2947?
CVE-2009-2947 affects Xapian Omega versions 0.8.0 to 1.0.15.
4
What type of vulnerability is CVE-2009-2947?
CVE-2009-2947 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2009-2947 be exploited remotely?
Yes, CVE-2009-2947 can be exploited remotely by injecting arbitrary web scripts via CGI parameter values.