CVE-2009-4941: XSS
Published Jul 22, 2010
·Updated
Cross-site scripting (XSS) vulnerability in signin.php in ATRC ACollab 1.2 allows remote attackers to inject arbitrary web script or HTML via the f parameter.
Affected Software
1 affected component
ATutor Acollab=1.2
Event History
Jul 22, 2010
CVE Published
05:40 AM
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4941?
CVE-2009-4941 has been classified as a medium severity vulnerability due to its potential for exploiting cross-site scripting.
2
How do I fix CVE-2009-4941?
To fix CVE-2009-4941, you should sanitize and validate user input in the f parameter of sign_in.php to prevent script injection.
3
What software is affected by CVE-2009-4941?
CVE-2009-4941 affects ATRC ACollab version 1.2.
4
Can CVE-2009-4941 be exploited remotely?
Yes, CVE-2009-4941 can be exploited remotely by attackers through manipulation of the f parameter.
5
What type of attack does CVE-2009-4941 enable?
CVE-2009-4941 enables cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary web script or HTML.