CVE-2009-4266

MEDIUM 4.3CVE-2009-4266 · Published 10/12/2009 · updated 16/06/2026

In short

CVE-2009-4266 is a MEDIUM (CVSS 4.3) vulnerability affecting advanced image hosting script (yabsoft).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 73.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
advanced image hosting script yabsoft	`= 2.2= 2.3`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in search.php in YABSoft Advanced Image Hosting (AIH) Script 2.2, and possibly 2.3, allows remote attackers to inject arbitrary web script or HTML via the text parameter.

References

secunia.com/advisories/34366
exploit-db.com/exploits/10336 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/54582

More vulnerabilities in advanced image hosting script

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free