CVE-2009-3539

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.52%

Published

Oct 2, 2009

Modified

Apr 22, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBYourFreeWorld Ultra Classifieds - 'listads.php' Multiple Cross-Site Scripting Vulnerabilities Exploit-DBYourFreeWorld Ultra Classifieds - 'subclass.php?cname' Cross-Site Scripting TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web script or HTML via the (1) cname parameter to subclass.php and the (2) sn parameter to listads.php.

Weaknesses (CWE)

CWE-79

Affected Products (1)

yourfreeworld · ultra_classifieds_provulnerable

References (6)

http://packetstormsecurity.org/0907-exploits/ultraclassifieds-xss.txt

Exploit

http://secunia.com/advisories/35857

Vendor Advisory

http://www.vupen.com/english/advisories/2009/1965

Vendor Advisory

http://packetstormsecurity.org/0907-exploits/ultraclassifieds-xss.txt

Exploit

http://secunia.com/advisories/35857

Vendor Advisory

http://www.vupen.com/english/advisories/2009/1965

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs