Unscored severity · published Aug 21, 2009
CVE-2009-2919
Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field
–
CVSS
0.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OR
Orca · Boonex
2.0; 2.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2919
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2919
Exploit
http://securityreason.com/exploitalert/5644
www.securityfocus.com
http://www.securityfocus.com/bid/33545
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/48434
More from Orca
–
CVE-2008-5167
PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals is enabled, allows remote attackers to execute arbitrary…