CVE-2009-0430
Active Bids - XSS
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to search.asp and the (2) URL parameter to tellafriend.asp.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Pouya_Server · textwebappsasp
https://www.exploit-db.com/exploits/32730
Scores
EPSS
0.0050
EPSS Percentile
65.7%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
activewebsoftwares/active_bids
n/a/n/a
Timeline
Published
Feb 05, 2009
Tracked Since
Feb 18, 2026