CVE-2009-4087

no score yetEPSS 1.1%

Cross-site scripting (XSS) vulnerability in index.php in telepark.wiki 2.4.23 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2009-11-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

telepark:telepark.wiki

References

http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/
http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt
http://secunia.com/advisories/37391
http://www.osvdb.org/60213
https://exchange.xforce.ibmcloud.com/vulnerabilities/54293

Check your stack JSON