CVE-2009-2589

medium

Description

Multiple cross-site scripting (XSS) vulnerabilities in Hutscripts PHP Website Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) feedback.php, (2) index.php, and (3) lostpassword.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/51912

http://www.vupen.com/english/advisories/2009/1978

http://secunia.com/advisories/35893

http://osvdb.org/56172

http://osvdb.org/56171

http://osvdb.org/56170

Details

Source: Mitre, NVD

Published: 2009-07-24

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N