{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in admin.php (aka the login page) in Content Management Made Easy (CMME) before 1.22 allows remote attackers to inject arbitrary web script or HTML via the username field."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2009-07-07T19:00:00Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "35610", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/35610"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://sourceforge.net/project/shownotes.php?release_id=694724"}, {"tags": ["x_refsource_MISC"], "url": "http://sourceforge.net/tracker/?func=detail&aid=2500186&group_id=215535&atid=1034058"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-2342", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in admin.php (aka the login page) in Content Management Made Easy (CMME) before 1.22 allows remote attackers to inject arbitrary web script or HTML via the username field."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "35610", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/35610"}, {"name": "http://sourceforge.net/project/shownotes.php?release_id=694724", "refsource": "CONFIRM", "url": "http://sourceforge.net/project/shownotes.php?release_id=694724"}, {"name": "http://sourceforge.net/tracker/?func=detail&aid=2500186&group_id=215535&atid=1034058", "refsource": "MISC", "url": "http://sourceforge.net/tracker/?func=detail&aid=2500186&group_id=215535&atid=1034058"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T05:44:55.963Z"}, "title": "CVE Program Container", "references": [{"name": "35610", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/35610"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://sourceforge.net/project/shownotes.php?release_id=694724"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://sourceforge.net/tracker/?func=detail&aid=2500186&group_id=215535&atid=1034058"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-2342", "datePublished": "2009-07-07T19:00:00Z", "dateReserved": "2009-07-07T00:00:00Z", "dateUpdated": "2024-09-17T00:16:44.456Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hans_oesterholt:cmme:*:*:*:*:*:*:*:*", "matchCriteriaId": "F6F5F426-B5D9-4852-9A99-7A1CC97EF07B", "versionEndIncluding": "1.21", "vulnerable": true}, {"criteria": "cpe:2.3:a:hans_oesterholt:cmme:1.02:*:*:*:*:*:*:*", "matchCriteriaId": "DFC22F7C-B77B-4E7D-B7A5-C23DF080CF4B", "vulnerable": true}, {"criteria": "cpe:2.3:a:hans_oesterholt:cmme:1.03:*:*:*:*:*:*:*", "matchCriteriaId": "69496B41-06D4-4520-9B96-CA52340BCAFB", "vulnerable": true}, {"criteria": "cpe:2.3:a:hans_oesterholt:cmme:1.06:*:*:*:*:*:*:*", "matchCriteriaId": "A9FF586F-9FCE-44FD-86B4-BBD5D8960082", "vulnerable": true}, {"criteria": "cpe:2.3:a:hans_oesterholt:cmme:1.07:*:*:*:*:*:*:*", "matchCriteriaId": "CAA93DF4-E422-45C6-947D-72C39527503A", "vulnerable": true}, {"criteria": "cpe:2.3:a:hans_oesterholt:cmme:1.08:*:*:*:*:*:*:*", "matchCriteriaId": "7E78D4A3-1065-4209-ABA7-E37DC506738B", "vulnerable": true}, {"criteria": "cpe:2.3:a:hans_oesterholt:cmme:1.09:*:*:*:*:*:*:*", "matchCriteriaId": "C291A60C-22B5-4BC2-9FD5-8C45EAFD7CB6", "vulnerable": true}, {"criteria": "cpe:2.3:a:hans_oesterholt:cmme:1.10:*:*:*:*:*:*:*", "matchCriteriaId": "58B5A1DE-2725-4CE8-B72B-94B40B2D292C", "vulnerable": true}, {"criteria": "cpe:2.3:a:hans_oesterholt:cmme:1.11:*:*:*:*:*:*:*", "matchCriteriaId": "0A585CC6-497B-4570-8CE9-78D3A25E2A6A", "vulnerable": true}, {"criteria": "cpe:2.3:a:hans_oesterholt:cmme:1.12:*:*:*:*:*:*:*", "matchCriteriaId": "63FA730E-6D1F-4F8B-A4CA-FF5A0B4CAC17", "vulnerable": true}, {"criteria": "cpe:2.3:a:hans_oesterholt:cmme:1.18:*:*:*:*:*:*:*", "matchCriteriaId": "CDA0E7F0-E4E4-4E49-90A2-A8899545D46C", "vulnerable": true}, {"criteria": "cpe:2.3:a:hans_oesterholt:cmme:1.19:*:*:*:*:*:*:*", "matchCriteriaId": "F67A768C-F508-4DFA-8F19-DD81F45A6CAA", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in admin.php (aka the login page) in Content Management Made Easy (CMME) before 1.22 allows remote attackers to inject arbitrary web script or HTML via the username field."}, {"lang": "es", "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin.php (tambi\u00e9n conocido como p\u00e1gina de login)de Content Management Made Easy (CMME) v1.22 y anteriores, permite a atacantes remotos inyectar c\u00f3digo web o HTML a su elecci\u00f3n a trav\u00e9s del campo nombre de usuario."}], "id": "CVE-2009-2342", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2009-07-07T19:30:00.250", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/35610"}, {"source": "cve@mitre.org", "url": "http://sourceforge.net/project/shownotes.php?release_id=694724"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://sourceforge.net/tracker/?func=detail&aid=2500186&group_id=215535&atid=1034058"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/35610"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://sourceforge.net/project/shownotes.php?release_id=694724"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://sourceforge.net/tracker/?func=detail&aid=2500186&group_id=215535&atid=1034058"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}