Unrated severityNVD Advisory· Published Dec 31, 2009· Updated Apr 23, 2026
CVE-2009-4521
CVE-2009-4521
Description
Cross-site scripting (XSS) vulnerability in birt-viewer/run in Eclipse Business Intelligence and Reporting Tools (BIRT) before 2.5.0, as used in KonaKart and other products, allows remote attackers to inject arbitrary web script or HTML via the __report parameter.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- antisnatchor.com/2008/12/18/eclipse-birt-reflected-xssnvdExploit
- www.securityfocus.com/bid/36674nvdExploit
- bugs.eclipse.org/bugs/show_bug.cginvdExploit
- secunia.com/advisories/37025nvdVendor Advisory
- www.osvdb.org/58941nvd
- www.securityfocus.com/archive/1/507172/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/53773nvd
News mentions
0No linked articles in our index yet.