CVE-2009-2947

Published: Sep 14, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Xapian Omega before 1.0.16 allows remote attackers to inject arbitrary web script or HTML via unspecified CGI parameter values, which are sometimes included in exception messages.

Affected (32)

Products: Xapian: Omega

Xapian

1 product

Omega

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Xapian Omega	Up to 1.0.15
Xapian Omega	Version 0.8.0
Xapian Omega	Version 0.8.1
Xapian Omega	Version 0.8.2
Xapian Omega	Version 0.8.3
Xapian Omega	Version 0.8.4
Xapian Omega	Version 0.8.5
Xapian Omega	Version 0.9.0
Xapian Omega	Version 0.9.10
Xapian Omega	Version 0.9.1
Xapian Omega	Version 0.9.2
Xapian Omega	Version 0.9.3
Xapian Omega	Version 0.9.4
Xapian Omega	Version 0.9.5
Xapian Omega	Version 0.9.6
Xapian Omega	Version 0.9.7
Xapian Omega	Version 0.9.8
Xapian Omega	Version 0.9.9
Xapian Omega	Version 1.0.0
Xapian Omega	Version 1.0.10
Xapian Omega	Version 1.0.11
Xapian Omega	Version 1.0.12
Xapian Omega	Version 1.0.13
Xapian Omega	Version 1.0.14
Xapian Omega	Version 1.0.2
Xapian Omega	Version 1.0.3
Xapian Omega	Version 1.0.4
Xapian Omega	Version 1.0.5
Xapian Omega	Version 1.0.6
Xapian Omega	Version 1.0.7
Xapian Omega	Version 1.0.8
Xapian Omega	Version 1.0.9