CVE-2008-3715: XSS

Published Aug 19, 2008

Updated

Cross-site scripting (XSS) vulnerability in inc-core-admin-editor-previouscolorsjs.php in the FlexCMS 2.5 and earlier, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the PreviousColorsString parameter.

Affected Software

2 affected components

FlexCMS FlexCMS=2.0

FlexCMS FlexCMS=2.5

Event History

Aug 19, 2008

CVE Published

via MITRE·07:10 PM

Data Sourced

via MITRE·07:10 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3715?

CVE-2008-3715 has been classified as a medium-severity vulnerability due to its potential to allow remote code execution via XSS attacks.

How do I fix CVE-2008-3715?

To fix CVE-2008-3715, disable register_globals and validate input parameters in the affected PHP files.

What versions of FlexCMS are affected by CVE-2008-3715?

CVE-2008-3715 affects FlexCMS versions 2.0 and 2.5 when register_globals is enabled.

What type of vulnerability is CVE-2008-3715?

CVE-2008-3715 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.

Can CVE-2008-3715 lead to data theft?

Yes, exploiting CVE-2008-3715 could potentially lead to data theft through malicious script execution.