CVE-2009-4994

Published: Aug 25, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

Affected (22)

Products: Smartertools: Smartertrack

Smartertools

1 product

Smartertrack

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Smartertools Smartertrack	Up to 4.0.3483
Smartertools Smartertrack	Version 3.0.3040
Smartertools Smartertrack	Version 3.1.3050
Smartertools Smartertrack	Version 3.1.3089
Smartertools Smartertrack	Version 3.5.3126
Smartertools Smartertrack	Version 3.5.3159
Smartertools Smartertrack	Version 3.5.3167
Smartertools Smartertrack	Version 3.6.3216
Smartertools Smartertrack	Version 3.6.3217
Smartertools Smartertrack	Version 3.6.3229
Smartertools Smartertrack	Version 3.6.3246
Smartertools Smartertrack	Version 3.6.3267
Smartertools Smartertrack	Version 3.6.3274
Smartertools Smartertrack	Version 3.6.3309
Smartertools Smartertrack	Version 3.6.3355
Smartertools Smartertrack	Version 3.6.3411
Smartertools Smartertrack	Version 3.6.3413
Smartertools Smartertrack	Version 4.0.3387
Smartertools Smartertrack	Version 4.0.3399
Smartertools Smartertrack	Version 4.0.3411
Smartertools Smartertrack	Version 4.0.3413
Smartertools Smartertrack	Version 4.0.3435