Unrated severityNVD Advisory· Published Sep 22, 2009· Updated Apr 23, 2026
CVE-2009-3283
CVE-2009-3283
Description
Cross-site scripting (XSS) vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot, dated before 20090914, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to cookies.
Affected products
6- cpe:2.3:a:phpspot:php_bbs_ce:*:*:*:*:*:*:*:*
- cpe:2.3:a:phpspot:php_\&_css_bbs:*:*:*:*:*:*:*:*
- cpe:2.3:a:phpspot:php_image_capture_bbs:*:*:*:*:*:*:*:*
- cpe:2.3:a:phpspot:php_rss_builder:*:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.