PT-2009-5821 · Radbids · Radbids Gold

Moudi · Published 2009-10-02 · Updated 2017-09-19 · CVE-2009-3530

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions RadBids Gold version 4

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the mode parameter in the storefront.php file.

Recommendations For RadBids Gold version 4, update the storefront.php file to properly sanitize the mode parameter to prevent XSS attacks. As a temporary workaround, consider restricting access to the storefront.php file until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2009-3530

Affected Products

Radbids Gold

References · 5

• 🔥 https://exploit-db.com/exploits/9194 · Exploit
• 🔥 http://exploit-db.com/exploits/9194 · Exploit
• http://secunia.com/advisories/35827 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3530 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51837 · Note