CVE-2009-2569
Verlihub Control Panel VHCP 1.7e - XSS
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (VHCP) 1.7e allow remote attackers to inject arbitrary web script or HTML via (1) the nick parameter in a login action to index.php or (2) the URI in a news request to index.html.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by TEAMELITE · textwebappsphp
https://www.exploit-db.com/exploits/32989
Scores
EPSS
0.0176
EPSS Percentile
82.4%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
verlihub-project/verlihub_control_panel
n/a/n/a
Timeline
Published
Jul 22, 2009
Tracked Since
Feb 18, 2026