CVE-2009-4093: XSS
Published Nov 27, 2009
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) cname (Name) or (2) email parameters.
Affected Software
1 affected component
Simplog Simplog=0.9.3.2
Event History
Nov 27, 2009
CVE Published
via MITRE·08:45 PM
Data Sourced
via MITRE·08:45 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4093?
CVE-2009-4093 has a medium severity level due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2009-4093?
To fix CVE-2009-4093, you should validate and sanitize user inputs in the cname and email parameters to prevent XSS.
3
Which versions of Simplog are affected by CVE-2009-4093?
CVE-2009-4093 affects Simplog version 0.9.3.2 and possibly earlier versions.
4
What type of attack is enabled by CVE-2009-4093?
CVE-2009-4093 enables remote attackers to perform cross-site scripting (XSS) attacks.
5
What components of Simplog are vulnerable in CVE-2009-4093?
The vulnerabilities in CVE-2009-4093 originate from the comments.php file handling user input.