CVE Feed

    Dashboard / CVE / CVE-2009-1349

    CVE-2009-1349

    Cross-site scripting (XSS) vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script or HTML via the URI.

    Published:Apr 21, 2009
    Last Modified:Apr 23, 2026
    EPS:Apr 21, 2009
    EPSS Score:0.00376
    CVSS Score:4.3

    Affected Products

    Vendor
    Redhat
    Product
    Stronghold

    Exploits

    http://www.securityfocus.com/bid/34606http://www.securityfocus.com/bid/34606https://www.exploit-db.com/exploits/32929

    Related CVEs

    CVE-2005-3352 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache h…
    CVE-2005-3390 (CVSS 7.5) — The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, …
    CVE-2005-3389 (CVSS 5) — The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows…
    CVE-2005-3388 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 al…
    CVE-2005-2969 (CVSS 5) — The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_O…
    CVE-2005-2700 (CVSS 10) — ssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host…
    CVE-2005-0109 (CVSS 5.6) — Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and o…
    CVE-2004-1019 (CVSS 10) — The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denia…
    CVE-2004-1018 (CVSS 10) — Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause …
    CVE-2004-0940 (CVSS 7.8) — Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can c…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High