CVE-2009-3225

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.51%

Published

Sep 16, 2009

Modified

Apr 22, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBAlmondSoft Classifieds Pro - 'gmap.php?addr' Cross-Site Scripting Exploit-DBAlmondSoft Multiple Classifieds Products - 'index.php' Multiple Cross-Site Scripting Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, allow remote attackers to inject arbitrary web script or HTML via (1) the page parameter in a browse action to index.php or (2) the addr parameter to gmap.php. NOTE: some of these details are obtained from third party information.

Weaknesses (CWE)

CWE-79

Affected Products (2)

almondsoft · almond_classifiedsvulnerable

References (6)

http://packetstormsecurity.org/0907-exploits/almondclassifieds-xss.txt

Exploit

http://secunia.com/advisories/36003

Vendor Advisory

http://www.securityfocus.com/bid/35816

Exploit

http://packetstormsecurity.org/0907-exploits/almondclassifieds-xss.txt