CVE-2009-1798

Multiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the login_username vector for Forms/login1 is already covered by CVE-2009-4406.

• CWE-79

• http://holisticinfosec.org/content/view/111/45/
• http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=10887Vendor Advisory
• http://secunia.com/advisories/37744Vendor Advisory
• http://www.kb.cert.org/vuls/id/166739US Government Resource
• http://holisticinfosec.org/content/view/111/45/
• http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=10887Vendor Advisory
• http://secunia.com/advisories/37744Vendor Advisory
• http://www.kb.cert.org/vuls/id/166739US Government Resource

Published

Dec 28, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1789mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6…
• CVE-2009-1790Cross-site scripting (XSS) vulnerability in CGI RESCUE Trees…
• CVE-2009-1791Heap-based buffer overflow in aiff_read_header in libsndfile…
• CVE-2009-1792The system.openURL function in StoneTrip Ston3D StandalonePl…
• CVE-2009-1796Cross-site scripting (XSS) vulnerability in Sun Java System …
• CVE-2009-1797Multiple cross-site request forgery (CSRF) vulnerabilities o…
• CVE-2009-1799Multiple SQL injection vulnerabilities in the getGalleryImag…
• CVE-2009-1800Stack-based buffer overflow in the Chinagames CGAgent Active…
• CVE-2009-1801Multiple cross-site scripting (XSS) vulnerabilities in FreeP…
• CVE-2009-1802Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2009-1803FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x…
• CVE-2009-1804Multiple SQL injection vulnerabilities in admin/index.php in…