Unrated severityNVD Advisory· Published Feb 13, 2009· Updated Jun 16, 2026

CVE-2009-0573

Description

Multiple cross-site scripting (XSS) vulnerabilities in FotoWeb 6.0 (Build 273) allow remote attackers to inject arbitrary web script or HTML via the (1) s parameter to cmdrequest/Login.fwx and the (2) search parameter to Grid.fwx.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fotoware/Fotoweb2 versions
cpe:2.3:a:fotoware:fotoweb:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fotoware:fotoweb:6.0:*:*:*:*:*:*:*
- (no CPE)range: 6.0 (Build 273)

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/33677nvdExploit
secunia.com/advisories/33879nvdVendor Advisory
www.fortconsult.net/images/pdf/advisories/FotoWebXSS_final.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000