CVE-2009-1321

ASP Product Catalog 1.0 - Cross-Site Scripting via Search Keywords Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-1321. PoCs published by AlpHaNiX.

AI-analyzed exploit summary This Perl script exploits two vulnerabilities in ASP Product Catalog: an XSS vulnerability in the search functionality and a database disclosure vulnerability allowing direct access to the MDB file. It uses LWP::UserAgent to send crafted requests and verify exploitation.

Description

Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by AlpHaNiX · perlwebappsphp
https://www.exploit-db.com/exploits/8418

This Perl script exploits two vulnerabilities in ASP Product Catalog: an XSS vulnerability in the search functionality and a database disclosure vulnerability allowing direct access to the MDB file. It uses LWP::UserAgent to send crafted requests and verify exploitation.

Classification
Working Poc 95%
Attack Type
Xss | Info Leak
Complexity
Trivial
Reliability
Reliable
Target: ASP Product Catalog (version not specified)
No auth needed
Prerequisites: Target URL with vulnerable ASP Product Catalog installation
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/49858
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/34504
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/8418

Scores

EPSS 0.0147
EPSS Percentile 70.4%

Details

CWE
CWE-79
Status published
Products (1)
humayun_shabbir_bhutta/asp_product_catalog 1.0
Published Apr 17, 2009
Tracked Since Feb 18, 2026