CVE-2008-1064: XSS
Cross-site scripting (XSS) vulnerability in images.php in the Red Mexico RMSOFT Gallery System (GS) 2.0 module (aka rmgs) for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1064?
CVE-2008-1064 is classified as a medium severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2008-1064?
To fix CVE-2008-1064, it is recommended to upgrade to a patched version of the Red Mexico RMSOFT Gallery System or implement input validation and sanitization for the q parameter.
What type of attack is CVE-2008-1064 primarily associated with?
CVE-2008-1064 is primarily associated with cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts into web pages.
Which software is affected by CVE-2008-1064?
CVE-2008-1064 specifically affects version 2.0 of the Red Mexico RMSOFT Gallery System for the XOOPS platform.
Can CVE-2008-1064 be exploited remotely?
Yes, CVE-2008-1064 can be exploited remotely by attackers to execute arbitrary web scripts or HTML on affected installations.