CVE-2009-1790

MEDIO 4.3CVE-2009-1790 · Published 26/05/2009 · updated 16/06/2026

En resumen

CVE-2009-1790 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a rescue (cgi rescue).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 69.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
rescue cgi_rescue	`≤ cgi_rescue_trees`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in CGI RESCUE Trees before 2.11 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

References

jvn.jp/en/jp/JVN28521500/index.html
jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000028.html
osvdb.org/54545
secunia.com/advisories/35123 · Vendor Advisory
rescue.ne.jp/whatsnew/blog.cgi/permalink/20090512155247 · Vendor Advisory
securityfocus.com/bid/34999 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/50579

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free