VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Aug 25, 2010· Updated Apr 29, 2026

CVE-2009-4994

CVE-2009-4994

Description

Cross-site scripting (XSS) vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

Affected products

22
  • Smartertools/Smartertrack22 versions
    cpe:2.3:a:smartertools:smartertrack:*:*:*:*:*:*:*:*+ 21 more
    • cpe:2.3:a:smartertools:smartertrack:*:*:*:*:*:*:*:*range: <=4.0.3483
    • cpe:2.3:a:smartertools:smartertrack:3.0.3040:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.1.3050:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.1.3089:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.5.3126:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.5.3159:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.5.3167:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3216:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3217:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3229:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3246:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3267:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3274:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3309:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3355:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3411:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:3.6.3413:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:4.0.3387:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:4.0.3399:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:4.0.3411:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:4.0.3413:*:*:*:*:*:*:*
    • cpe:2.3:a:smartertools:smartertrack:4.0.3435:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.