CVE-2008-4120: XSS

Published Sep 29, 2008

Updated

Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) pass parameter to login.php, or the (3) name parameter to contact.php.

Affected Software

1 affected component

flatpress flatpress=0.804

Event History

Sep 29, 2008

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4120?

CVE-2008-4120 is classified as a medium severity vulnerability due to its potential for remote exploitation via cross-site scripting.

How do I fix CVE-2008-4120?

To fix CVE-2008-4120, you should update FlatPress to a version that addresses these XSS vulnerabilities.

What are the exploit vectors for CVE-2008-4120?

CVE-2008-4120 can be exploited through the user and pass parameters to login.php and the name parameter to contact.php.

Who is affected by CVE-2008-4120?

CVE-2008-4120 affects users of FlatPress version 0.804.

What types of attacks can occur due to CVE-2008-4120?

CVE-2008-4120 may allow attackers to inject arbitrary web scripts or HTML, potentially leading to various malicious attacks.