Unscored CVE-2009-4422 EUVD-2009-4389GHSA-9q7g-5q44-fv59

Multiple cross-site scripting (XSS) vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting JpGraph 3.0.6 allow…

Published Dec 24, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting JpGraph 3.0.6 allow remote attackers to inject arbitrary web script or HTML via a key to csim_in_html_ex1.php, and other unspecified vectors.

References

37483 vdb-entry
20091222 XSS Vulnerability in JpGraph 3.0.6 mailing-list
37832 third-party-advisory
MDVSA-2009:340 vendor-advisory
61268 vdb-entry