← Database

CVE-2009-0285

MEDIUM CVSS: 4.3 Published: 2009-01-27 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in error.asp in BBSXP 5.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Affected Platforms

Bbsxp Bbsxp

Weakness Type

CWE-79

References