Unrated severityNVD Advisory· Published Feb 26, 2009· Updated Apr 23, 2026
CVE-2009-0523
CVE-2009-0523
Description
Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled when displaying the Help Errors log.
Affected products
4cpe:2.3:a:adobe:robohelp:6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:adobe:robohelp:6:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:robohelp:7:*:*:*:*:*:*:*
cpe:2.3:a:adobe:robohelp_server:6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:adobe:robohelp_server:6:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:robohelp_server:7:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- www.adobe.com/support/security/bulletins/apsb09-02.htmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/33887nvdPatch
- www.vupen.com/english/advisories/2009/0512nvdPatch
- secunia.com/advisories/34048nvdVendor Advisory
- securitytracker.com/idnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/48890nvd
News mentions
0No linked articles in our index yet.