CVE-2009-4852

Festic Semanticscuttle < 0.94 - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in SemanticScuttle before 0.94.1 allow remote attackers to inject arbitrary web script or HTML via the sort parameter to index.php, and other unspecified vectors, a different issue than CVE-2008-6113. NOTE: some of these details are obtained from third party information.

References (2)

[Vendor Advisory] http://secunia.com/advisories/37387

[Product] http://semanticscuttle.svn.sourceforge.net/viewvc/semanticscuttle/branches/0.94.1/ChangeLog?view=markup&pathrev=471

Scores

EPSS 0.0026

EPSS Percentile 49.4%

Classification

CWE

CWE-79

Status published

Affected Products (11)

festic/semanticscuttle < 0.94

festic/semanticscuttle

n/a/n/a

Timeline

Published May 07, 2010

Tracked Since Feb 18, 2026