CVE-2009-1334

Cross-site scripting (XSS) vulnerability in login/FilepathLogin.html in IBM Tivoli Continuous Data Protection (CDP) for Files 3.1.4.0 allows remote attackers to inject arbitrary web script or HTML via the reason parameter.

• CWE-79

• http://secunia.com/advisories/34646Vendor Advisory
• http://securitytracker.com/id?1022060Exploit
• http://www.insight-tech.org/index.php?p=IBM-Tivoli-Continuous-Data-Protection-for-Files-version-3-1-4-0---XSSExploit, URL Repurposed
• http://www.osvdb.org/53651Exploit
• http://www.securityfocus.com/bid/34513Exploit
• http://www.vupen.com/english/advisories/2009/1021Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49872
• http://secunia.com/advisories/34646Vendor Advisory
• http://securitytracker.com/id?1022060Exploit
• http://www.insight-tech.org/index.php?p=IBM-Tivoli-Continuous-Data-Protection-for-Files-version-3-1-4-0---XSSExploit, URL Repurposed
• http://www.osvdb.org/53651Exploit
• http://www.securityfocus.com/bid/34513Exploit
• http://www.vupen.com/english/advisories/2009/1021Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49872

Published

Apr 17, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1328Stack-based buffer overflow in Mini-stream RM-MP3 Converter …
• CVE-2009-1329Stack-based buffer overflow in Mini-stream Shadow Stream Rec…
• CVE-2009-1330Stack-based buffer overflow in Easy RM to MP3 Converter allo…
• CVE-2009-1331Integer overflow in Microsoft Windows Media Player (WMP) 11.…
• CVE-2009-1332The Online Help feature in Sun Java System Directory Server …
• CVE-2009-1333Cross-site scripting (XSS) vulnerability in refresh_rate.htm…
• CVE-2009-1335Microsoft Internet Explorer 7 and 8 on Windows XP and Vista …
• CVE-2009-1336fs/nfs/client.c in the Linux kernel before 2.6.23 does not p…
• CVE-2009-1337The exit_notify function in kernel/exit.c in the Linux kerne…
• CVE-2009-1338The kill_something_info function in kernel/signal.c in the L…
• CVE-2009-1339Cross-site request forgery (CSRF) vulnerability in TWiki bef…
• CVE-2009-1341Memory leak in the dequote_bytea function in quote.c in the …