CVE-2009-1614
Last modified
CVE-2009-1614 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the msg parameter (aka the message in an article comment) or (2) the searchterm parameter (aka the search post form). NOTE: some of these details are obtained from third party information.. EPSS estimates a 1.27% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the msg parameter (aka the message in an article comment) or (2) the searchterm parameter (aka the search post form). NOTE: some of these details are obtained from third party information.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gowondesigns | Leap | 0.1.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-1614?
How severe is CVE-2009-1614?
How do I fix CVE-2009-1614?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-1608Multiple buffer overflows in Microchip MPLAB IDE 8.30 and po…
- CVE-2009-1609Unrestricted file upload vulnerability in admin/uploadform.a…
- CVE-2009-1610admin/changepassword.php in Job Script Job Board Software 2.…
- CVE-2009-1611Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.2…
- CVE-2009-1612Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX…
- CVE-2009-1613Multiple SQL injection vulnerabilities in leap.php in Leap C…
- CVE-2009-1615Unrestricted file upload vulnerability in Leap CMS 0.1.4 all…
- CVE-2009-1616Cross-site scripting (XSS) vulnerability in docs/showdoc.php…
- CVE-2009-1617Teraway LinkTracker 1.0 allows remote attackers to bypass au…
- CVE-2009-1618Teraway LiveHelp 2.0 allows remote attackers to bypass authe…
- CVE-2009-1619Teraway FileStream 1.0 allows remote attackers to bypass aut…
- CVE-2009-1620Multiple cross-site scripting (XSS) vulnerabilities in input…
Are you affected by CVE-2009-1614?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST