CVE-2009-3360

N/A Unknown

Published: September 24, 2009 Modified: April 23, 2026

Description

Multiple cross-site scripting (XSS) vulnerabilities in Datemill 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) return parameter to photo_view.php, and st parameter to (2) photo_search.php and (3) search.php.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://osvdb.org/57989

Source: cve@mitre.org

http://osvdb.org/57991

Source: cve@mitre.org

http://packetstormsecurity.org/0909-exploits/datemill-xss.txt

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/36608

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/57990

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/53177

Source: cve@mitre.org

http://osvdb.org/57989