CVE-2009-2890

Phpscriptsnow Riddles - XSS

Title source: rule
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Moudi · textwebappsphp
https://www.exploit-db.com/exploits/34902

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51874
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/56124
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35932

Scores

EPSS 0.0158
EPSS Percentile 81.7%

Details

CWE
CWE-79
Status published
Products (1)
phpscriptsnow/riddles
Published Aug 20, 2009
Tracked Since Feb 18, 2026