CVE-2009-3755

Kreotek Phpbms - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php and (2) modules\base\myaccount.php; and the PATH_INFO to (3) modules_view.php, (4) tabledefs_options.php, and (5) adminsettings.php in phpbms\modules\base\.

Exploits (1)

exploitdb WORKING POC VERIFIED
by eLwaux · textwebappsphp
https://www.exploit-db.com/exploits/9101

References (2)

Scores

EPSS 0.0044
EPSS Percentile 62.8%

Classification

CWE
CWE-79
Status published

Affected Products (2)

kreotek/phpbms
n/a/n/a

Timeline

Published Oct 22, 2009
Tracked Since Feb 18, 2026