$ cve CVE-2009-0541 JSON

CVE-2009-0541 EXPLOIT

4.3

MEDIUM · CVSS 2.0 · EPSS 1.8% (pctl 78)

Patch early

A public exploit exists.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the username field in an admin/ request to index.php, possibly related to the login[username] parameter and the app/code/core/Mage/Admin/Model/Session.php login function; (2) the email address field in an admin/index/forgotpassword/ request to index.php, possibly related to the email parameter and the app/code/core/Mage/Adminhtml/controllers/IndexController.php forgotpasswordAction function; or (3) the return parameter to the default URI under downloader/.

Scoring

CVSS	4.3 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS	1.81% — more likely to be exploited than 78% of all CVEs
Weakness	CWE-79
On CISA KEV	no
Public exploit	yes
Published	2009-02-25
Last modified	2026-06-16

Affected (1)

Vendor	Product
magentocommerc	magento

Public exploits

Source	Title	Date
exploit-db	Magento 1.2 - '/app/code/core/Mage/Admin/Model/Session.php?login['Username']' Cross-Site Scripting	2009-02-24
exploit-db	Magento 1.2 - '/app/code/core/Mage/Adminhtml/controllers/IndexController.php?email' Cross-Site Scripting	2009-02-24
exploit-db	Magento 1.2 - 'downloader/index.php' Cross-Site Scripting	2009-02-24

References

→ the Explorer · watch your stack · NVD