Unrated severityNVD Advisory· Published Jul 2, 2009· Updated Jun 16, 2026
CVE-2009-2302
CVE-2009-2302
Description
Cross-site scripting (XSS) vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action. NOTE: it was later reported that 5.2.1 is also affected.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:avatic:aardvark_topsites_php:*:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:avatic:aardvark_topsites_php:*:*:*:*:*:*:*:*range: <=5.2.0
- cpe:2.3:a:avatic:aardvark_topsites_php:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:avatic:aardvark_topsites_php:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:avatic:aardvark_topsites_php:4.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:avatic:aardvark_topsites_php:5:*:*:*:*:*:*:*
- cpe:2.3:a:avatic:aardvark_topsites_php:5.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:avatic:aardvark_topsites_php:5.1.2:*:*:*:*:*:*:*
- Range: <=5.2.1
Patches
Vulnerability mechanics
References
6- www.securityfocus.com/bid/35506nvdExploit
- secunia.com/advisories/41985nvd
- websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/nvd
- www.securityfocus.com/archive/1/504574/100/0/threadednvd
- www.securityfocus.com/archive/1/514423/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/51391nvd
News mentions
0No linked articles in our index yet.