CVE-2008-4535: XSS
Cross-site scripting (XSS) vulnerability in EC-CUBE Ver2 2.1.2a and earlier, EC-CUBE Ver2 Beta(RC) 2.2.0-beta and earlier, and EC-CUBE Community Edition Nighly-Build r17623 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4536 and CVE-2008-4537.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4535?
CVE-2008-4535 has a critical severity rating due to its potential for allowing attackers to execute arbitrary scripts.
What types of attacks can CVE-2008-4535 facilitate?
CVE-2008-4535 can facilitate cross-site scripting (XSS) attacks that enable an attacker to inject malicious scripts into web pages viewed by users.
How do I fix CVE-2008-4535?
To fix CVE-2008-4535, upgrade to a version of EC-CUBE that is above 2.1.2a or apply the appropriate security patches provided by the developer.
Who is affected by CVE-2008-4535?
CVE-2008-4535 affects users of EC-CUBE versions 2.1.2a and earlier, as well as beta versions and nightly builds specified.
What is the impact of an exploit of CVE-2008-4535?
Exploitation of CVE-2008-4535 could lead to unauthorized access to user data, theft of credentials, or spreading of malware.