CVE-2009-2919

Boonex Orca - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field.

References (3)

Scores

EPSS 0.0018
EPSS Percentile 39.2%

Classification

CWE
CWE-79
Status published

Affected Products (3)

boonex/orca
boonex/orca
n/a/n/a

Timeline

Published Aug 21, 2009
Tracked Since Feb 18, 2026