Unrated severityNVD Advisory· Published Aug 28, 2009· Updated Apr 23, 2026
CVE-2009-3006
CVE-2009-3006
Description
Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page.
Affected products
1- cpe:2.3:a:maxthon:maxthon_browser:2.5.3.80:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.