CVE-2009-4983

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.29%

Published

Aug 25, 2010

Modified

Apr 28, 2026

Public PoC / Exploit (4)

All weaponized →

Exploit-DBSilurus Classifieds - 'category.php?ID' Cross-Site Scripting Exploit-DBSilurus Classifieds - 'search.php?keywords' Cross-Site Scripting Exploit-DBSilurus Classifieds - 'wcategory.php?ID' Cross-Site Scripting TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitrary web script or HTML via the ID parameter to (1) category.php and (2) wcategory.php, and the (3) keywords parameter to search.php.

Weaknesses (CWE)

CWE-79

Affected Products (1)

snowhall · silurus_systemvulnerable

References (4)

http://packetstormsecurity.org/0908-exploits/silurus-xss.txt

Exploit

http://secunia.com/advisories/36124

Vendor Advisory

http://packetstormsecurity.org/0908-exploits/silurus-xss.txt

Exploit

http://secunia.com/advisories/36124

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs