CVE-2009-3593

EPSS 1.5%

Multiple cross-site scripting (XSS) vulnerabilities in Freelancers 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to placebid.php and (2) jobid parameter to post_resume.php.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.org/0907-exploits/freelancers-xss.txtunverified exploitdbwww.exploit-db.com/exploits/34713unverified exploitdbwww.exploit-db.com/exploits/34714unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.org/0907-exploits/freelancers-xss.txt http://secunia.com/advisories/35903 https://exchange.xforce.ibmcloud.com/vulnerabilities/51828 http://www.osvdb.org/55992 http://www.osvdb.org/55993