CVE-2008-3709: XSS
Multiple cross-site scripting (XSS) vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to inject arbitrary web script or HTML via the (1) lOptionsOptions, (2) lNavAdminOptions, or (3) lNavReturn parameter to options.php; or the (4) lNavReturn parameter to subscribe.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3709?
CVE-2008-3709 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2008-3709?
To fix CVE-2008-3709, validate and sanitize user inputs in the affected parameters before processing them.
What software versions are affected by CVE-2008-3709?
CVE-2008-3709 affects CyBoards PHP Lite version 1.21.
What types of attacks does CVE-2008-3709 allow?
CVE-2008-3709 allows remote attackers to execute arbitrary web scripts or HTML through cross-site scripting vulnerabilities.
Where do the vulnerabilities in CVE-2008-3709 occur?
The vulnerabilities in CVE-2008-3709 occur in the options.php and subscribe.php files via specific parameter injection.