← Database

CVE-2009-2588

MEDIUM CVSS: 4.3 Published: 2009-07-24 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) feedback.php, (2) index.php, and (3) lostpassword.php.

Affected Platforms

Resalecode Hotscripts Type Php Clone Script

Weakness Type

CWE-79

References