CVE-2009-3359

Multiple cross-site scripting (XSS) vulnerabilities in Match Agency BiZ 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) important parameter to edit_profile.php and (2) pid parameter to report.php.

🔗 References (10)

• cve@mitrehttp://osvdb.org/57968
• cve@mitrehttp://osvdb.org/57969
• cve@mitrehttp://packetstormsecurity.org/0909-exploits/matchagencybiz-xss.txt
• cve@mitrehttp://secunia.com/advisories/36672
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/53173
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/57968
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/57969
• af854a3a-2127-422b-91ae-364da2661108http://packetstormsecurity.org/0909-exploits/matchagencybiz-xss.txt
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/36672
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/53173