Unrated severityNVD Advisory· Published Apr 28, 2009· Updated Apr 23, 2026

CVE-2009-1458

Description

Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to inject arbitrary web script or HTML via (1) the slab parameter in an edit action, (2) the catname parameter in a showcats action, and (3) the cat parameter in a reordercat action.

Affected products

Razorcms/Razorcms2 versions
cpe:2.3:a:razorcms:razorcms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:razorcms:razorcms:*:*:*:*:*:*:*:*range: <=0.3
- cpe:2.3:a:razorcms:razorcms:0.2:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/34566nvdExploit
razorcms.co.uk/support/viewtopic.phpnvdVendor Advisory
secunia.com/advisories/34744nvdVendor Advisory
marc.infonvd
marc.infonvd
osvdb.org/53776nvd
exchange.xforce.ibmcloud.com/vulnerabilities/49945nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000