CVE-2009-3171

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.53%

Published

Sep 11, 2009

Modified

Apr 22, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBGazelle CMS 1.0 - Multiple Vulnerabilities / Remote Code Execution TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter to user.php or (2) lookup parameter to search.php.

Weaknesses (CWE)

CWE-79

Affected Products (1)

anantasoft · gazelle_cmsvulnerable

References (10)

http://packetstormsecurity.org/0909-exploits/gazellecms-xss.txt

Exploit

http://secunia.com/advisories/33686

Vendor Advisory

http://www.exploit-db.com/exploits/9425

http://www.vupen.com/english/advisories/2009/2541

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/52415

http://packetstormsecurity.org/0909-exploits/gazellecms-xss.txt

Exploit

http://secunia.com/advisories/33686

Vendor Advisory

http://www.exploit-db.com/exploits/9425

http://www.vupen.com/english/advisories/2009/2541

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/52415

KEV Catalog EPSS Scores Vendors All CVEs