CVE-2009-4888

Nskate Phortail - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in poster.php in PHortail 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) ti, and (4) txt parameters.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Jonathan Salwan · textwebappsphp

https://www.exploit-db.com/exploits/32844

View Code ZIP pw:eip

References (6)

[Third Party Advisory, VDB Entry] http://osvdb.org/52502

[Exploit] http://packetstormsecurity.org/0903-exploits/phortail-xss.txt

[Vendor Advisory] http://secunia.com/advisories/34203

[Exploit] http://www.securityfocus.com/bid/34038

[Vendor Advisory] http://www.vupen.com/english/advisories/2009/0631

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/49143

Scores

EPSS 0.0409

EPSS Percentile 88.4%

Classification

CWE

CWE-79

Status published

Affected Products (2)

nskate/phortail

n/a/n/a

Timeline

Published Jun 11, 2010

Tracked Since Feb 18, 2026