Unscored severity · published Mar 19, 2009
CVE-2009-0971
Cross-site scripting (XSS) vulnerability in futomi's CGI Cafe Access Analyzer CGI Standard Version 3.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in futomi's CGI Cafe Access Analyzer CGI Standard Version 3.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Access Analyzer Cgi · Futomi
through 3.8.1; 1.1; 1.2; 1.3; 1.4; 2.0; +13 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0971
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0971
jvn.jp
http://jvn.jp/en/jp/JVN23558374/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000015.html
osvdb.org
http://osvdb.org/52802
Vendor Advisory
http://secunia.com/advisories/34271
Patch
http://www.futomi.com/library/info/2009/20090316.html
www.securityfocus.com
http://www.securityfocus.com/bid/34123
More from Access Analyzer Cgi
–
CVE-2010-2366
Cross-site scripting (XSS) vulnerability in futomi CGI Cafe Access Analyzer CGI Professional, and Standard 4.0.2 and earlier, allows remote attackers to inject arbitrary web…
–
CVE-2008-5809
futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable session id, which makes it easier for…