CVE-2009-2114

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.50%

Published

Jun 18, 2009

Modified

Apr 22, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBSkybluecanvas 1.1 r237 - 'admin.php' Multiple Cross-Site Scripting Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in admin.php in SkyBlueCanvas 1.1 r237 allow remote attackers to inject arbitrary web script or HTML via the (1) mgroup, (2) mgr, (3) objtype, (4) id, and (5) dir parameters.

Weaknesses (CWE)

CWE-79

Affected Products (1)

skybluecanvas · skybluecanvasvulnerable

References (10)

http://forum.intern0t.net/intern0t-advisories/1120-intern0t-skybluecanvas-1-1-r237-multiple-vulnerabilities.html

Exploit

http://osvdb.org/55115

Exploit

http://secunia.com/advisories/35478

Vendor Advisory

http://www.securityfocus.com/archive/1/504302/100/0/threaded

https://exchange.xforce.ibmcloud.com/vulnerabilities/51165

http://forum.intern0t.net/intern0t-advisories/1120-intern0t-skybluecanvas-1-1-r237-multiple-vulnerabilities.html

Exploit

http://osvdb.org/55115

Exploit

http://secunia.com/advisories/35478

Vendor Advisory

http://www.securityfocus.com/archive/1/504302/100/0/threaded

https://exchange.xforce.ibmcloud.com/vulnerabilities/51165

KEV Catalog EPSS Scores Vendors All CVEs