CVE-2009-4403

MEDIO 4.3CVE-2009-4403 · Published 23/12/2009 · updated 16/06/2026

In breve

CVE-2009-4403 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda rumba xml (rumbacms).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 75.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
rumba xml rumbacms	`= 1.8`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in index.php in Rumba XML 1.8 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. NOTE: some of these details are obtained from third party information.

References

osvdb.org/61137
secunia.com/advisories/37840 · Vendor Advisory
exploit-db.com/exploits/10534 · Exploit
securityfocus.com/archive/1/508536/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/54913

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free