{"api_version":"1","generated_at":"2026-07-23T12:05:24+00:00","cve":"CVE-2009-1175","urls":{"html":"https://cve.report/CVE-2009-1175","api":"https://cve.report/api/cve/CVE-2009-1175.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-1175","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-1175"},"summary":{"title":"CVE-2009-1175","description":"Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in the DAAP extension in Banshee 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the server parameter, which is not properly handled in an error message.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-03-31 14:09:53","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=577270","name":"http://bugzilla.gnome.org/show_bug.cgi?id=577270","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Bug 577270 – Cross Site Scripting in the DAAP Extension","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/30/2","name":"http://www.openwall.com/lists/oss-security/2009/03/30/2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - [Fwd: Cross-Site Scripting in Banshee DAAP Extension]","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1175","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1175","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"1175","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"banshee-project","cpe5":"banshee","cpe6":"1.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T05:04:48.666Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"[oss-security] 20090330 [Fwd: Cross-Site Scripting in Banshee DAAP Extension]","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2009/03/30/2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://bugzilla.gnome.org/show_bug.cgi?id=577270"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-03-30T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in the DAAP extension in Banshee 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the server parameter, which is not properly handled in an error message."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2009-04-02T09:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"[oss-security] 20090330 [Fwd: Cross-Site Scripting in Banshee DAAP Extension]","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2009/03/30/2"},{"tags":["x_refsource_CONFIRM"],"url":"http://bugzilla.gnome.org/show_bug.cgi?id=577270"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-1175","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in the DAAP extension in Banshee 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the server parameter, which is not properly handled in an error message."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"[oss-security] 20090330 [Fwd: Cross-Site Scripting in Banshee DAAP Extension]","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2009/03/30/2"},{"name":"http://bugzilla.gnome.org/show_bug.cgi?id=577270","refsource":"CONFIRM","url":"http://bugzilla.gnome.org/show_bug.cgi?id=577270"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-1175","datePublished":"2009-03-31T10:00:00.000Z","dateReserved":"2009-03-30T00:00:00.000Z","dateUpdated":"2024-08-07T05:04:48.666Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-03-31 14:09:53","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:banshee-project:banshee:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1A13354B-324C-448B-A1DF-9DDB60D914CE"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"1175","Ordinal":"1","Title":"CVE-2009-1175","CVE":"CVE-2009-1175","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"1175","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in the DAAP extension in Banshee 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the server parameter, which is not properly handled in an error message.","Type":"Description","Title":"CVE-2009-1175"},{"CveYear":"2009","CveId":"1175","Ordinal":"2","NoteData":"2009-03-31","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"1175","Ordinal":"3","NoteData":"2009-04-02","Type":"Other","Title":"Modified"}]}}}