Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

CVE-2009-2937 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2009-2937

CVE-2009-2937

UNKNOWN

Cross-site scripting (XSS) vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed

Published Sep 18, 2009

Modified 1 years ago

Details

Cross-site scripting (XSS) vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed.

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546178

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546179

http://intertwingly.net/blog/2009/09/09/Venus-Updates

http://lists.planetplanet.org/archives/devel/2009-September/001999.html

http://secunia.com/advisories/36636

http://secunia.com/advisories/36766

http://www.securityfocus.com/bid/36392

https://bugzilla.redhat.com/show_bug.cgi?id=522802

https://www.cve.org/CVERecord?id=CVE-2009-2937

https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00504.html

https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00525.html

CVSS Analysis

CVSS v2.0

4.3

Exploitability

Access Vector

NetworkAV:N

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

NoneA:N

4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N

Ecosystems

Timeline

PublishedSep 18, 2009

ModifiedSep 17, 2024