CVE-2009-4984 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 1.3% (pctl 69)
Patch early
A public exploit exists.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Keywords parameter to search.php and (2) SearchIndex parameter to browse.php.
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| EPSS | 1.27% — more likely to be exploited than 69% of all CVEs |
| Weakness | CWE-79 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2010-08-25 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| websitesrus | accessories me php affiliate script |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | AccessoriesMe PHP Affiliate Script 1.4 - Blind SQL Injection / Cross-Site Scripting | 2009-08-05 |
References
→ the Explorer · watch your stack · NVD