First published: Mon Sep 29 2008(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) pass parameter to login.php, or the (3) name parameter to contact.php.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
openMairie Openpresse | =0.804 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-4120 is classified as a medium severity vulnerability due to its potential for remote exploitation via cross-site scripting.
To fix CVE-2008-4120, you should update FlatPress to a version that addresses these XSS vulnerabilities.
CVE-2008-4120 can be exploited through the user and pass parameters to login.php and the name parameter to contact.php.
CVE-2008-4120 affects users of FlatPress version 0.804.
CVE-2008-4120 may allow attackers to inject arbitrary web scripts or HTML, potentially leading to various malicious attacks.