CVE-2009-4364

ScriptsEz Ez Blog - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog allows remote attackers to inject arbitrary web script or HTML via the cname parameter, related to the act and id parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploits (2)

exploitdb WORKING POC

webappsphp

https://www.exploit-db.com/exploits/10461

View on exploitdb

exploitdb WORKING POC

webappsphp

https://www.exploit-db.com/exploits/10458

View on exploitdb

References (3)

[Third Party Advisory, VDB Entry] http://osvdb.org/61113

[Vendor Advisory] http://secunia.com/advisories/37743

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/54896

Scores

EPSS 0.0018

EPSS Percentile 39.6%

Classification

CWE

CWE-79

Status published

Affected Products (2)

scriptsez/ez_blog

n/a/n/a

Timeline

Published Dec 21, 2009

Tracked Since Feb 18, 2026