CVE-2009-3367
Last modified
CVE-2009-3367 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) index.php and (2) main.php, and the (3) show parameter to main.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.. EPSS estimates a 1.45% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) index.php and (2) main.php, and the (3) show parameter to main.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Plohni | An Image Gallery | 1.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-3367?
How severe is CVE-2009-3367?
How do I fix CVE-2009-3367?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-3361SQL injection vulnerability in index.php in PHP-IPNMonitor a…
- CVE-2009-3362PHP remote file inclusion vulnerability in printnews.php3 in…
- CVE-2009-3363Cross-site scripting (XSS) vulnerability in the BUEditor mod…
- CVE-2009-3364Stack-based buffer overflow in FTPShell Client 4.1 RC2 allow…
- CVE-2009-3365PHP remote file inclusion vulnerability in add-ons/modules/s…
- CVE-2009-3366Directory traversal vulnerability in navigation.php in An im…
- CVE-2009-3368Cross-site scripting (XSS) vulnerability in the Hotel Bookin…
- CVE-2009-3369CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync…
- CVE-2009-3370Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allow…
- CVE-2009-3371Use-after-free vulnerability in Mozilla Firefox 3.5.x before…
- CVE-2009-3372Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and Se…
- CVE-2009-3373Heap-based buffer overflow in the GIF image parser in Mozill…
Are you affected by CVE-2009-3367?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST