CVE-2009-2919

LOW 3.5CVE-2009-2919 · Published 21/08/2009 · updated 16/06/2026

In short

CVE-2009-2919 is a LOW (CVSS 3.5) vulnerability affecting orca (boonex).
Chance of exploitation in the next 30 days (EPSS): 0.88%, higher than 59.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
orca boonex	`= 2.0= 2.0.2`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field.

References

securityreason.com/exploitalert/5644 · Exploit
securityfocus.com/bid/33545
exchange.xforce.ibmcloud.com/vulnerabilities/48434

More vulnerabilities in orca

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free