{"id":"CVE-2009-4984","aliases":["EUVD-2009-4946","GHSA-7qh2-5rgv-2x95"],"status":"published","title":"Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4...","description":"Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Keywords parameter to search.php and (2) SearchIndex parameter to browse.php.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01271,"percentile":0.70028,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-79"],"published":"2010-08-25T19:00:00Z","modified":"2026-06-16T23:14:46Z","exploits":[{"source":"exploitdb","id":"EDB-9370","title":"AccessoriesMe PHP Affiliate Script 1.4 - Blind SQL Injection / Cross-Site Scripting","type":"webapps","platform":"php","date":"2009-08-05","verified":true,"url":"https://www.exploit-db.com/exploits/9370"}],"products":[{"vendor":"websitesrus","product":"accessories_me_php_affiliate_script"}],"references":[{"url":"http://www.exploit-db.com/exploits/9370","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://secunia.com/advisories/36148","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-4984"},{"url":"https://github.com/advisories/GHSA-7qh2-5rgv-2x95"}],"sources":{"cve":[{"id":"CVE-2009-4984","description":"Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Keywords parameter to search.php and (2) SearchIndex parameter to browse.php.","status":"published","published":"2010-08-25T19:00:00Z","modified":"2024-08-07T07:24:53.686Z","updated_at":"2026-11-02T14:33:24.782697Z"}],"euvd":[{"id":"EUVD-2009-4946","description":"Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Keywords parameter to search.php and (2) SearchIndex parameter to browse.php.","status":"published","published":"2010-08-25T19:00:00Z","modified":"2024-08-07T07:24:53Z","updated_at":"2026-11-03T01:39:08.21747Z"}],"ghsa":[{"id":"GHSA-7qh2-5rgv-2x95","title":"Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4...","description":"Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Keywords parameter to search.php and (2) SearchIndex parameter to browse.php.","status":"published","published":"2022-05-02T04:00:20Z","modified":"2023-01-31T05:08:49Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:49:27.588283Z"}],"nvd":[{"id":"CVE-2009-4984","description":"Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Keywords parameter to search.php and (2) SearchIndex parameter to browse.php.","status":"published","published":"2010-08-25T20:00:14.44Z","modified":"2026-06-16T23:14:46.45Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:01:38.684719Z"}]}}