CVE-2009-3152

NT Bbs E-market - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Professional allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) bt_code, and (3) b_no parameters in a board view action.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Ivan Sanchez · textwebappsphp
https://www.exploit-db.com/exploits/33130

Scores

EPSS 0.0135
EPSS Percentile 79.9%

Classification

CWE
CWE-79
Status published

Affected Products (2)

nt/bbs_e-market
n/a/n/a

Timeline

Published Sep 10, 2009
Tracked Since Feb 18, 2026