medium4.3Public exploit code
CVE-2009-4682
Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- good/bad vote - Cross-Site Scripting / Local File Inclusion2009-07-17 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Scriptsez | Good\/Bad Vote | All versions |