CVE-2009-2217

MEDIUM 4.3CVE-2009-2217 · Published 25/06/2009 · updated 16/06/2026

In short

CVE-2009-2217 is a MEDIUM (CVSS 4.3) vulnerability affecting nbbc (phantom-inker).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
nbbc phantom-inker	`= 1.0= 1.1= 1.2= 1.3= 1.3.1= 1.3.2= 1.3.3= 1.3.4= 1.4.0= alpha≤ 1.4.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in NBBC before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via an invalid URL in a BBCode img tag.

References

osvdb.org/55266
secunia.com/advisories/35520 · Vendor Advisory
sourceforge.net/forum/message.php · Patch
sourceforge.net/forum/message.php · Patch
sourceforge.net/tracker · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/51288

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free