CVE-2009-2569

Verlihub Control Panel VHCP 1.7e - XSS

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-2569. PoCs published by TEAMELITE.

AI-analyzed exploit summary This exploit demonstrates multiple XSS vulnerabilities in Verlihub Control Panel 1.7e by injecting arbitrary script code via the 'nick' parameter in the login page. The PoC includes examples of alert-based and iframe-based payloads.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (VHCP) 1.7e allow remote attackers to inject arbitrary web script or HTML via (1) the nick parameter in a login action to index.php or (2) the URI in a news request to index.html.

Exploits (1)

exploitdb WORKING POC VERIFIED
by TEAMELITE · textwebappsphp
https://www.exploit-db.com/exploits/32989

This exploit demonstrates multiple XSS vulnerabilities in Verlihub Control Panel 1.7e by injecting arbitrary script code via the 'nick' parameter in the login page. The PoC includes examples of alert-based and iframe-based payloads.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: Verlihub Control Panel 1.7e
No auth needed
Prerequisites: Access to the target web application
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34941
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/34856
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1264

Scores

EPSS 0.0176
EPSS Percentile 75.2%

Details

CWE
CWE-79
Status published
Products (1)
verlihub-project/verlihub_control_panel 1.7e
Published Jul 22, 2009
Tracked Since Feb 18, 2026