CVE-2009-2785
PHP Open Classifieds Script - XSS
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter to buy.php and the id parameter to (2) contact.php and (3) tellafriend.php.
Scores
EPSS
0.0052
EPSS Percentile
66.3%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
classifiedphpscript/php_open_classifieds_script
n/a/n/a
Timeline
Published
Aug 17, 2009
Tracked Since
Feb 18, 2026