$ cve CVE-2009-4548 JSON

CVE-2009-4548 EXPLOIT

4.3

MEDIUM · CVSS 2.0 · EPSS 2.3% (pctl 82)

Patch early

A public exploit exists.

Description

Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via the category_id parameter to (1) products.php, (2) article.php, (3) product_details.php, or (4) reviews.php; the (5) forum_id parameter to forum.php; or the (6) search_category_id parameter to products_search.php.

Scoring

CVSS	4.3 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS	2.26% — more likely to be exploited than 82% of all CVEs
Weakness	CWE-79
On CISA KEV	no
Public exploit	yes
Published	2010-01-04
Last modified	2026-06-16

Affected (1)

Vendor	Product
viart	viart helpdesk

Public exploits

Source	Title	Date
exploit-db	ViArt Helpdesk - 'products.php?category_id' Cross-Site Scripting	2009-08-10
exploit-db	ViArt Helpdesk - 'article.php?category_id' Cross-Site Scripting	2009-08-10
exploit-db	ViArt Helpdesk - 'product_details.php?category_id' Cross-Site Scripting	2009-08-10
exploit-db	ViArt Helpdesk - 'reviews.php?category_id' Cross-Site Scripting	2009-08-10
exploit-db	ViArt Helpdesk - 'forum.php?forum_id' Cross-Site Scripting	2009-08-10
exploit-db	ViArt Helpdesk - 'products_search.php?search_category_id' Cross-Site Scripting	2009-08-10

References

→ the Explorer · watch your stack · NVD