CVE-2008-4536: XSS
Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 Beta(RC) 2.2.0-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17319 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4535 and CVE-2008-4537.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4536?
CVE-2008-4536 is classified as a Cross-site Scripting (XSS) vulnerability which can have a high impact on the affected systems.
How do I fix CVE-2008-4536?
To fix CVE-2008-4536, update EC-CUBE to a version that is not vulnerable, such as version 1.4.7 or later.
Which versions of EC-CUBE are affected by CVE-2008-4536?
EC-CUBE versions 1.4.6 and earlier, 1.5.0-beta and earlier, 2.1.2a and earlier, along with other specified beta and community editions are affected.
Can CVE-2008-4536 be exploited remotely?
Yes, CVE-2008-4536 allows remote attackers to exploit the vulnerability through user input.
What type of attack does CVE-2008-4536 facilitate?
CVE-2008-4536 facilitates Cross-site Scripting (XSS) attacks, allowing attackers to inject malicious scripts into web pages viewed by users.