CVE-2009-4944: XSS
Multiple cross-site scripting (XSS) vulnerabilities in ATRC ACollab 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) address parameter to profile.php or the (2) description parameter to events/addevent.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4944?
CVE-2009-4944 is classified as a medium severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2009-4944?
To fix CVE-2009-4944, validate and sanitize user inputs for the address and description parameters in your application.
What software is affected by CVE-2009-4944?
CVE-2009-4944 affects ATRC ACollab version 1.2.
What types of attacks are possible with CVE-2009-4944?
CVE-2009-4944 allows attackers to perform cross-site scripting attacks by injecting arbitrary web scripts or HTML into vulnerable pages.
Can I exploit CVE-2009-4944 without authentication?
Yes, CVE-2009-4944 can be exploited by unauthenticated attackers since it targets parameters accessible in publicly available pages.