CVE-2009-4473

Published: Dec 30, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in WorkArea/ContentDesigner/ekformsiframe.aspx in Ektron CMS400.NET 7.6.1.53 and 7.6.6.47, and possibly 7.52 through 7.66sp2, allow remote attackers to inject arbitrary web script or HTML via the (1) css, (2) eca, (3) id, and (4) skin parameters. NOTE: some of these details are obtained from third party information.

Affected (22)

Products: Ektron: Cms4000.net

Ektron

1 product

Cms4000.net

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Ektron Cms4000.net	Version 7.52
Ektron Cms4000.net	Version 7.53
Ektron Cms4000.net	Version 7.53 sp2
Ektron Cms4000.net	Version 7.54
Ektron Cms4000.net	Version 7.54 sp2
Ektron Cms4000.net	Version 7.6.0
Ektron Cms4000.net	Version 7.6.0 sp1
Ektron Cms4000.net	Version 7.6.0 sp2
Ektron Cms4000.net	Version 7.6.1.53
Ektron Cms4000.net	Version 7.6.1
Ektron Cms4000.net	Version 7.6.1 sp1
Ektron Cms4000.net	Version 7.6.1 sp2
Ektron Cms4000.net	Version 7.6.1 sp3
Ektron Cms4000.net	Version 7.6.1 sp4
Ektron Cms4000.net	Version 7.6.5
Ektron Cms4000.net	Version 7.6.5 sp1
Ektron Cms4000.net	Version 7.6.5 sp2
Ektron Cms4000.net	Version 7.6.5 sp3
Ektron Cms4000.net	Version 7.6.6.47
Ektron Cms4000.net	Version 7.6.6
Ektron Cms4000.net	Version 7.6.6 sp1
Ektron Cms4000.net	Version 7.6.6 sp2