CVE-2009-3493

Zenas Paobacheca Guestbook - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in Zenas PaoBacheca Guestbook 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) scrivi.php and (2) index.php.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Moudi · textwebappsphp

https://www.exploit-db.com/exploits/34453

View Code ZIP pw:eip

exploitdb WORKING POC VERIFIED

by Moudi · textwebappsphp

https://www.exploit-db.com/exploits/34454

View Code ZIP pw:eip

References (5)

[Exploit] http://osvdb.org/58163

[Exploit] http://osvdb.org/58164

[Exploit] http://packetstormsecurity.org/0909-exploits/paobacheca-xss.txt

[Vendor Advisory] http://secunia.com/advisories/36741

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/53323

Scores

EPSS 0.0142

EPSS Percentile 80.4%

Classification

CWE

CWE-79

Status published

Affected Products (2)

zenas/paobacheca_guestbook

n/a/n/a

Timeline

Published Sep 30, 2009

Tracked Since Feb 18, 2026