What’s Vulnerable › Vulnerabilities

CVE-2009-4994

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-08-25 · updated 2026-06-16
• Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

Affected products

• SmarterTools SmarterTrack: through 4.0.3483; 3.0.3040, 3.1.3050, 3.1.3089, 3.5.3126, 3.5.3159, 3.5.3167 (+15)

References

• http://holisticinfosec.org/content/view/123/45/
• http://secunia.com/advisories/36172
• http://www.smartertools.com/SmarterTrack/ReleaseNotes.aspx
• http://holisticinfosec.org/content/view/123/45/
• http://secunia.com/advisories/36172
• http://www.smartertools.com/SmarterTrack/ReleaseNotes.aspx

Get alerted when CVE-2009-4994 or the next vulnerability affects your stack