CVE-2008-0092: XSS
Published Jan 4, 2008
·Updated
Cross-site scripting (XSS) vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Affected Software
1 affected component
phpWebSite phpWebSite=1.4.0
Event History
Jan 4, 2008
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0092?
CVE-2008-0092 is classified as a medium severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2008-0092?
To fix CVE-2008-0092, update phpWebSite to a version higher than 1.4.0 that addresses XSS vulnerabilities.
3
Which versions of phpWebSite are affected by CVE-2008-0092?
phpWebSite version 1.4.0 is the only version specifically affected by CVE-2008-0092.
4
What does CVE-2008-0092 allow attackers to do?
CVE-2008-0092 allows attackers to inject arbitrary web scripts or HTML into the search parameter.
5
Is CVE-2008-0092 a local or remote vulnerability?
CVE-2008-0092 is a remote vulnerability that can be exploited by attackers from a different location.