Unscored severity · published Sep 15, 2009
CVE-2009-3191
Multiple cross-site scripting (XSS) vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to inject arbitrary web script or HTML via the cat parameter to (1) rss.php and…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to inject arbitrary web script or HTML via the cat parameter to (1) rss.php and (2) opml.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PS
Pad Site Scripts · Pad-site-scripts
3.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3191
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3191
www.exploit-db.com
http://www.exploit-db.com/exploits/9531
Vendor Advisory
http://www.vupen.com/english/advisories/2009/2434
More from Pad Site Scripts
–
CVE-2009-3190
Multiple SQL injection vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to list.php and (2) cat…