CVE-2009-3420
Intesync Miniweb - XSS
Title source: ruleDescription
Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the (1) begin parameter and the (2) PATH_INFO.
Exploits (1)
Scores
EPSS
0.0046
EPSS Percentile
63.9%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
intesync/miniweb
n/a/n/a
Timeline
Published
Sep 25, 2009
Tracked Since
Feb 18, 2026