CVE-2009-0417

Cross-site scripting (XSS) vulnerability in the AgaviWebRouting::gen(null) method in Agavi 0.11 before 0.11.6 and 1.0 before 1.0.0 beta 8 allows remote…

published February 6, 2009

CVSS
—
EPSS
1%
Percentile
63.5
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the AgaviWebRouting::gen(null) method in Agavi 0.11 before 0.11.6 and 1.0 before 1.0.0 beta 8 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with certain characters that are not properly handled by web browsers that do not strictly follow RFC 3986, such as Internet Explorer 6 and 7.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01033 · 63.5th percentile
Published
2009-02-06T00:00Z
EPSS history
Timeline
  • 06 FEB 00:00Z
    Cross-site scripting (XSS) vulnerability in the AgaviWebRouting::gen(null) method in Agavi 0.11 before 0.11.6 and 1.0 before 1.0.0 beta 8 allows remote…
    cvelistv5