cbcvebase.
CVE-2009-3006
published 2009-08-28

CVE-2009-3006: Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web…

PriorityP416medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.05%
59.9th percentile
Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page.

Affected

1 ranges
VendorProductVersion rangeFixed in
maxthonmaxthon_browser——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.