{"api_version":"1","generated_at":"2026-07-23T13:38:48+00:00","cve":"CVE-2009-0526","urls":{"html":"https://cve.report/CVE-2009-0526","api":"https://cve.report/api/cve/CVE-2009-0526.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-0526","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-0526"},"summary":{"title":"CVE-2009-0526","description":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) url and (2) acuparam parameters, and (3) the URI.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-02-11 20:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://secunia.com/advisories/33866","name":"http://secunia.com/advisories/33866","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"AdaptCMS Lite File Inclusion and Cross-Site Scripting - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48611","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48611","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/33698","name":"http://www.securityfocus.com/bid/33698","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"AdaptCMS Lite Cross Site Scripting and Remote File Include Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.exploit-db.com/exploits/8016","name":"https://www.exploit-db.com/exploits/8016","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"AdaptCMS Lite 1.4 (XSS/RFI) Multiple Remote Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-0526","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0526","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"526","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adaptcms","cpe5":"adaptcms","cpe6":"1.4","cpe7":"unknown","cpe8":"lite","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T04:40:03.718Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"33866","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/33866"},{"name":"8016","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/8016"},{"name":"adaptcms-index-xss(48611)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48611"},{"name":"33698","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/33698"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-02-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) url and (2) acuparam parameters, and (3) the URI."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"33866","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/33866"},{"name":"8016","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/8016"},{"name":"adaptcms-index-xss(48611)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48611"},{"name":"33698","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/33698"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-0526","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) url and (2) acuparam parameters, and (3) the URI."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"33866","refsource":"SECUNIA","url":"http://secunia.com/advisories/33866"},{"name":"8016","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/8016"},{"name":"adaptcms-index-xss(48611)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48611"},{"name":"33698","refsource":"BID","url":"http://www.securityfocus.com/bid/33698"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-0526","datePublished":"2009-02-11T20:00:00.000Z","dateReserved":"2009-02-11T00:00:00.000Z","dateUpdated":"2024-08-07T04:40:03.718Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-02-11 20:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adaptcms:adaptcms:1.4:unknown:lite:*:*:*:*:*","matchCriteriaId":"C54A354F-9494-46D2-89A7-8884F41D4173"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"526","Ordinal":"1","Title":"CVE-2009-0526","CVE":"CVE-2009-0526","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"526","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) url and (2) acuparam parameters, and (3) the URI.","Type":"Description","Title":"CVE-2009-0526"},{"CveYear":"2009","CveId":"526","Ordinal":"2","NoteData":"2009-02-11","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"526","Ordinal":"3","NoteData":"2017-09-28","Type":"Other","Title":"Modified"}]}}}