CVE-2008-4120: XSS
First published: Mon Sep 29 2008(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) pass parameter to login.php, or the (3) name parameter to contact.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| openMairie Openpresse | =0.804 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.flatpress.org/home/comments.php?entry=entry080925-180744
- http://www.datensalat.eu/~fabian/cve/CVE-2008-4120-flatpress.html
- http://www.securityfocus.com/bid/31407
- http://sourceforge.net/project/shownotes.php?group_id=157089&release_id=628765_id=628765
- http://securityreason.com/securityalert/4324
- http://www.securityfocus.com/archive/1/496740/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2008-4120?
CVE-2008-4120 is classified as a medium severity vulnerability due to its potential for remote exploitation via cross-site scripting.
How do I fix CVE-2008-4120?
To fix CVE-2008-4120, you should update FlatPress to a version that addresses these XSS vulnerabilities.
What are the exploit vectors for CVE-2008-4120?
CVE-2008-4120 can be exploited through the user and pass parameters to login.php and the name parameter to contact.php.
Who is affected by CVE-2008-4120?
CVE-2008-4120 affects users of FlatPress version 0.804.
What types of attacks can occur due to CVE-2008-4120?
CVE-2008-4120 may allow attackers to inject arbitrary web scripts or HTML, potentially leading to various malicious attacks.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/author
- agent/description
- agent/event
- agent/source
- agent/weakness
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/flatpress
- canonical/openmairie openpresse
- version/openmairie openpresse/0.804