CVE-2008-3937: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Open Media Collectors Database (OpenDb) 1.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) userid parameter in an edit action to useradmin.php, the (2) title parameter to listings.php, and the (3) redirecturl parameter to userprofile.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3937?
CVE-2008-3937 is considered a medium-severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2008-3937?
To fix CVE-2008-3937, upgrade Open Media Collectors Database to a version that addresses this XSS vulnerability.
What are the affected components in CVE-2008-3937?
CVE-2008-3937 affects the user_admin.php and listings.php components of OpenDb 1.0.6.
What are the consequences of exploiting CVE-2008-3937?
Exploiting CVE-2008-3937 allows attackers to inject arbitrary web scripts or HTML, potentially compromising user data and site integrity.
Who is at risk from CVE-2008-3937?
Users of Open Media Collectors Database version 1.0.6 are at risk from CVE-2008-3937 due to the presence of multiple XSS vulnerabilities.