CVE-2009-3348

Datavore Gyro - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component.

Exploits (1)

exploitdb WORKING POC VERIFIED
by OoN_Boy · textwebappsphp
https://www.exploit-db.com/exploits/9640

References (2)

Scores

EPSS 0.0044
EPSS Percentile 62.8%

Classification

CWE
CWE-79
Status published

Affected Products (2)

datavore/gyro
n/a/n/a

Timeline

Published Sep 24, 2009
Tracked Since Feb 18, 2026