PT-2010-1740 · Small Pirate · Spirate

Yenh4Cker · Published 2010-07-22 · Updated 2018-10-10 · CVE-2009-4937

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Small Pirate (SPirate) version 2.1

Description The issue allows remote attackers to inject arbitrary web script or HTML via an onmouseover action in an img BBCode tag within a url BBCode tag, which can lead to cross-site scripting (XSS).

Recommendations For version 2.1, consider disabling the use of img and url BBCode tags until a patch is available to prevent exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2009-4937

Affected Products

Spirate

References · 6

• 🔥 http://exploit-db.com/exploits/8819 · Exploit
• 🔥 http://osvdb.org/54783 · Exploit
• http://secunia.com/advisories/35272 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4937 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50836 · Note
• http://securityfocus.com/archive/1/503863/100/0/threaded · Note