CVE-2009-2569

Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (VHCP) 1.7e allow remote attackers to inject arbitrary web script or HTML via (1) the nick parameter in a login action to index.php or (2) the URI in a news request to index.html.

• CWE-79

• http://packetstorm.linuxsecurity.com/0905-exploits/verlihub-xss.txtExploit
• http://secunia.com/advisories/34941Vendor Advisory
• http://www.securityfocus.com/bid/34856Exploit
• http://www.vupen.com/english/advisories/2009/1264Vendor Advisory
• http://packetstorm.linuxsecurity.com/0905-exploits/verlihub-xss.txtExploit
• http://secunia.com/advisories/34941Vendor Advisory
• http://www.securityfocus.com/bid/34856Exploit
• http://www.vupen.com/english/advisories/2009/1264Vendor Advisory

Published

Jul 22, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2563Unspecified vulnerability in the Infiniband dissector in Wir…
• CVE-2009-2564NOS Microsystems getPlus Download Manager, as used in Adobe …
• CVE-2009-2565Cross-site scripting (XSS) vulnerability in Perl CGI's By Mr…
• CVE-2009-2566Stack-based buffer overflow in TFM MMPlayer 2.0, and possibl…
• CVE-2009-2567SQL injection vulnerability in the Almond Classifieds (com_a…
• CVE-2009-2568Stack-based buffer overflow in Sorinara Streaming Audio Play…
• CVE-2009-2570Stack-based buffer overflow in the Symantec.FaxViewerControl…
• CVE-2009-2571Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2009-2572Cross-site request forgery (CSRF) vulnerability in the Fives…
• CVE-2009-2573Multiple SQL injection vulnerabilities in MiniTwitter 0.2 be…
• CVE-2009-2574index.php in MiniTwitter 0.2 beta allows remote authenticate…
• CVE-2009-2575The Research In Motion (RIM) BlackBerry 8800 allows remote a…