VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 25, 2010· Updated Jun 16, 2026

CVE-2009-4994

CVE-2009-4994

Description

Cross-site scripting (XSS) vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

Affected products

23
  • Smartertools/Smartertrack23 versions
    cpe:2.3:a:smartertools:smartertrack:*:*:*:*:*:*:*:*+ 22 more
    • cpe:2.3:a:smartertools:smartertrack:*:*:*:*:*:*:*:*range: <=4.0.3483
    • cpe:2.3:a:smartertools:smartertrack:3.0.3040:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.1.3050:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.1.3089:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.5.3126:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.5.3159:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.5.3167:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3216:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3217:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3229:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3246:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3267:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3274:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3309:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3355:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3411:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3413:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:4.0.3387:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:4.0.3399:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:4.0.3411:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:4.0.3413:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:4.0.3435:*:*:*:*:*:*:*
    • (no CPE)range: <4.0.3504

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.