CVE-2009-1408

Description

Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags, as demonstrated using (1) email, (2) img, and (3) url tags.

References

https://www.exploit-db.com/exploits/8453

https://exchange.xforce.ibmcloud.com/vulnerabilities/49937

http://www.webspell.org/index.php?site=news_comments&newsID=126&lang=uk

http://www.webspell.org/index.php?site=files&file=25

http://www.securityfocus.com/archive/1/502732/100/0/threaded

http://secunia.com/advisories/34764

http://osvdb.org/53782

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS