VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 22, 2009· Updated Apr 23, 2026

CVE-2009-0245

CVE-2009-0245

Description

Cross-site scripting (XSS) vulnerability in Usagi Project MyNETS 1.2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4629.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

MyNETS 1.2.0.1 and earlier contains a cross-site scripting vulnerability that allows remote attackers to inject arbitrary web script or HTML.

Vulnerability

MyNETS, an open-source SNS software from Usagi Project, contains a cross-site scripting (XSS) vulnerability. Versions 1.2.0.1 and earlier are affected [1][2]. The vulnerability allows injection of arbitrary web script or HTML via unspecified vectors.

Exploitation

An attacker can exploit this vulnerability by crafting a malicious web page that, when viewed by a user, executes arbitrary script in the user's browser [2]. No authentication is required, but user interaction (viewing the page) is necessary.

Impact

Successful exploitation allows the attacker to execute arbitrary script on the user's web browser, potentially leading to session hijacking, defacement, or redirection to malicious sites [1][2]. The impact is limited to the user's browser session.

Mitigation

The vendor recommends updating to the latest version [2]. No specific fixed version is mentioned in the available references. Users should apply patches or updates as provided by the developer [1].

References
  1. JVNDB-2009-000001 - JVN iPedia - 脆弱性対策情報データベース
  2. JVN#36802959 MyNETS cross-site scripting vulnerability

AI Insight generated on May 24, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

6
  • Usagi/Mynets6 versions
    cpe:2.3:a:usagi:mynets:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:usagi:mynets:*:*:*:*:*:*:*:*range: <=1.2.0.1
    • cpe:2.3:a:usagi:mynets:1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:usagi:mynets:1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:usagi:mynets:1.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:usagi:mynets:1.2.0:*:*:*:*:*:*:*
    • (no CPE)range: <=1.2.0.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.