Unscored CVE-2009-4937 EUVD-2009-4899GHSA-qvmw-935f-m857

Cross-site scripting (XSS) vulnerability in Small Pirate (SPirate) 2.1 allows remote attackers to inject arbitrary web script or HTML via a…

Published Jul 22, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Small Pirate (SPirate) 2.1 allows remote attackers to inject arbitrary web script or HTML via an onmouseover action in an img BBCode tag within a url BBCode tag.

References

8819 exploit
54783 vdb-entry
35272 third-party-advisory
small-pirate-bbcode-xss(50836) vdb-entry
20090527 MULTIPLE REMOTE VULNERABILITIES --Small Pirates v-2.1--> mailing-list