{"id":"CVE-2009-4888","state":"PUBLISHED","title":"Cross-site scripting (XSS) vulnerability in poster.php in PHortail 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) ti, and (","description":"Cross-site scripting (XSS) vulnerability in poster.php in PHortail 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) ti, and (4) txt parameters.","publishedAt":"2010-06-11T14:00:00.000Z","updatedAt":"2024-08-07T07:17:25.923Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://secunia.com/advisories/34203","http://www.securityfocus.com/bid/34038","http://www.vupen.com/english/advisories/2009/0631","http://osvdb.org/52502","http://packetstormsecurity.org/0903-exploits/phortail-xss.txt","https://exchange.xforce.ibmcloud.com/vulnerabilities/49143"],"weaknesses":[],"ingestedAt":"2026-10-29T19:39:26.132Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2009/4xxx/CVE-2009-4888.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2009-4888","state":"PUBLISHED","datePublished":"2010-06-11T14:00:00.000Z","dateUpdated":"2024-08-07T07:17:25.923Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2010-06-11T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in poster.php in PHortail 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) ti, and (4) txt parameters."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://secunia.com/advisories/34203","name":"34203","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/bid/34038","name":"34038","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.vupen.com/english/advisories/2009/0631","name":"ADV-2009-0631","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://osvdb.org/52502","name":"52502","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://packetstormsecurity.org/0903-exploits/phortail-xss.txt","tags":["x_refsource_MISC"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49143","name":"phortail-poster-xss(49143)","tags":["vdb-entry","x_refsource_XF"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2009-03-10T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-4888","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in poster.php in PHortail 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) ti, and (4) txt parameters."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"34203","refsource":"SECUNIA","url":"http://secunia.com/advisories/34203"},{"name":"34038","refsource":"BID","url":"http://www.securityfocus.com/bid/34038"},{"name":"ADV-2009-0631","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/0631"},{"name":"52502","refsource":"OSVDB","url":"http://osvdb.org/52502"},{"name":"http://packetstormsecurity.org/0903-exploits/phortail-xss.txt","refsource":"MISC","url":"http://packetstormsecurity.org/0903-exploits/phortail-xss.txt"},{"name":"phortail-poster-xss(49143)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49143"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://secunia.com/advisories/34203","name":"34203","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/34038","name":"34038","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2009/0631","name":"ADV-2009-0631","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://osvdb.org/52502","name":"52502","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://packetstormsecurity.org/0903-exploits/phortail-xss.txt","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49143","name":"phortail-poster-xss(49143)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T07:17:25.923Z"}}]}}}