CVE-2009-4848

MEDIUM 4.3CVE-2009-4848 · Published 07/05/2010 · updated 16/06/2026

In short

CVE-2009-4848 is a MEDIUM (CVSS 4.3) vulnerability affecting virtualiq (toutvirtual).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
virtualiq toutvirtual	`= 3.2= 3.5`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the (1) userId parameter to tvserver/server/user/setPermissions.jsp, (2) deptName parameter to tvserver/server/user/addDepartment.jsp, (3) ID parameter to tvserver/server/inventory/inventoryTabs.jsp, (4) reportName parameter to tvserver/reports/virtualIQAdminReports.do, or (5) middleName parameter in a save action to tvserver/user/user.do.

References

secunia.com/advisories/37359 · Vendor Advisory
securenetwork.it/ricerca/advisory/download/SN-2009-02.txt · Exploit
securityfocus.com/archive/1/507729/100/0/threaded

More vulnerabilities in virtualiq

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

virtualiq

toutvirtual

= 3.2= 3.5

No fix yet

Description

More vulnerabilities in virtualiq

See all →