CVE-2009-4888

Cross-site scripting (XSS) vulnerability in poster.php in PHortail 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) ti, and (4) txt parameters.

• CWE-79

• http://osvdb.org/52502
• http://packetstormsecurity.org/0903-exploits/phortail-xss.txtExploit
• http://secunia.com/advisories/34203Vendor Advisory
• http://www.securityfocus.com/bid/34038Exploit
• http://www.vupen.com/english/advisories/2009/0631Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49143
• http://osvdb.org/52502
• http://packetstormsecurity.org/0903-exploits/phortail-xss.txtExploit
• http://secunia.com/advisories/34203Vendor Advisory
• http://www.securityfocus.com/bid/34038Exploit
• http://www.vupen.com/english/advisories/2009/0631Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49143

Published

Jun 11, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-4882Cross-site scripting (XSS) vulnerability in zc/publisher/htm…
• CVE-2009-4883SQL injection vulnerability in index.php in PHPRecipeBook 2.…
• CVE-2009-4884Multiple SQL injection vulnerabilities in phpCommunity 2 2.1…
• CVE-2009-4885Cross-site scripting (XSS) vulnerability in templates/1/logi…
• CVE-2009-4886Multiple directory traversal vulnerabilities in phpCommunity…
• CVE-2009-4887PHP remote file inclusion vulnerability in index.php in CMS …
• CVE-2009-4889SQL injection vulnerability in books.php in the Book Panel (…
• CVE-2009-4890Multiple cross-site scripting (XSS) vulnerabilities in the l…
• CVE-2009-4891SQL injection vulnerability in index.php in CS-Cart 2.0.0 Be…
• CVE-2009-4892SQL injection vulnerability in Content Management System WEB…
• CVE-2009-4893Buffer overflow in UnrealIRCd 3.2beta11 through 3.2.8, when …
• CVE-2009-4894Multiple cross-site scripting (XSS) vulnerabilities in profi…