CVE-2009-4697: Multiple cross-site scripting (XSS) vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers t...

Security readout for executives and security teams

RadNICS Gold 5 has multiple cross-site scripting flaws in index.php. An attacker could cause a user’s browser to run attacker-controlled script in the context of the vulnerable site. Business impact depends on whether RadNICS Gold 5 is still exposed and whether trusted users access it. Exposure is likely limited to organizations still running RadNICS Gold 5 with the affected index.php actions reachable by users or the internet. The source bundle does not provide deployment prevalence or supported-version data. Prioritize discovery first. If RadNICS Gold 5 is not present, risk is negligible. If it is internet-facing, plan near-term remediation or retirement because public exploit information exists and the software appears old. Mitigation focus: Inventory and remove any exposed RadNICS Gold 5 instances.; Check vendor or maintainer guidance for any available fixed version.; Restrict access to affected forum pages until remediation is confirmed..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.