CVE-2009-4608

Cross-site scripting (XSS) vulnerability in Canon IT Solutions Inc. ACCESSGUARDIAN 3.0.14 and earlier, and 3.5.6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to authentication.

• CWE-79

• http://canon-its.jp/guardian/topics/200910ag.htmlVendor Advisory
• http://jvn.jp/en/jp/JVN33822756/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000066.htmlThird Party Advisory, VDB Entry
• http://osvdb.org/59058Broken Link
• http://secunia.com/advisories/37045Third Party Advisory
• http://www.vupen.com/english/advisories/2009/2973Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53822Third Party Advisory, VDB Entry
• http://canon-its.jp/guardian/topics/200910ag.htmlVendor Advisory
• http://jvn.jp/en/jp/JVN33822756/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000066.htmlThird Party Advisory, VDB Entry
• http://osvdb.org/59058Broken Link
• http://secunia.com/advisories/37045Third Party Advisory
• http://www.vupen.com/english/advisories/2009/2973Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53822Third Party Advisory, VDB Entry

Published

Jan 13, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-4602Cross-site scripting (XSS) vulnerability in the Randomizer m…
• CVE-2009-4603Unspecified vulnerability in sapstartsrv.exe in the SAP Kern…
• CVE-2009-4604PHP remote file inclusion vulnerability in mamboleto.php in …
• CVE-2009-4605scripts/setup.php (aka the setup script) in phpMyAdmin 2.11.…
• CVE-2009-4606South River Technologies WebDrive 9.02 build 2232 installs t…
• CVE-2009-4607The command line interface in Overland Storage Snap Server 4…
• CVE-2009-4609The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remo…
• CVE-2009-4610Multiple cross-site scripting (XSS) vulnerabilities in Mort …
• CVE-2009-4611Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace…
• CVE-2009-4612Multiple cross-site scripting (XSS) vulnerabilities in the W…
• CVE-2009-4613SQL injection vulnerability in realestate20/loginaction.php …
• CVE-2009-4614Multiple PHP remote file inclusion vulnerabilities in Moa Ga…