CVE-2009-0455

Description

Cross-site scripting (XSS) vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1, and earlier versions allows remote attackers to inject arbitrary web script or HTML via the username parameter to comment.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/48603

http://www.glfusion.org/article.php/xsscomments

http://www.fortconsult.net/images/pdf/advisories/glFusion-xss-advisory.pdf

http://secunia.com/advisories/33878

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS