CVE-2009-2292

MÉDIO 4.3CVE-2009-2292 · Published 01/07/2009 · updated 16/06/2026

Em resumo

CVE-2009-2292 é uma vulnerabilidade MÉDIO (CVSS 4.3) que afeta a-news (appleple).
Chance de exploração nos próximos 30 dias (EPSS): 1.3%, maior que 69.7% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
a-news appleple	`= 2.32`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Appleple a-News 2.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

jvn.jp/en/jp/JVN42927215/index.html
jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000030.html
secunia.com/advisories/35171 · Vendor Advisory
appleple.com/news/index.php · Vendor Advisory
osvdb.org/54636
securityfocus.com/bid/35070
exchange.xforce.ibmcloud.com/vulnerabilities/50679

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free