CVE-2009-2785

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-08-17 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter to buy.php and the id parameter to (2) contact.php and (3) tellafriend.php.

Affected products

Classifiedphpscript Php Open Classifieds Script: all versions

References

http://osvdb.org/56657
http://osvdb.org/56658
http://osvdb.org/56659
http://packetstormsecurity.org/0907-exploits/openclassifieds-xss.txt
http://secunia.com/advisories/35929
https://exchange.xforce.ibmcloud.com/vulnerabilities/52123
http://osvdb.org/56657
http://osvdb.org/56658
http://osvdb.org/56659
http://packetstormsecurity.org/0907-exploits/openclassifieds-xss.txt
http://secunia.com/advisories/35929
https://exchange.xforce.ibmcloud.com/vulnerabilities/52123

Get alerted when CVE-2009-2785 or the next vulnerability affects your stack