CVE-2008-4537: XSS
Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 Beta(RC) 2.1.1-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17336 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4535 and CVE-2008-4536.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4537?
CVE-2008-4537 has a medium severity rating due to its potential for exploitation via cross-site scripting attacks.
How do I fix CVE-2008-4537?
To fix CVE-2008-4537, update your EC-CUBE installation to version 1.4.7 or later, 1.5.0-beta2 or later, or 2.1.3 or later.
Which versions of EC-CUBE are affected by CVE-2008-4537?
CVE-2008-4537 affects EC-CUBE versions 1.4.6 and earlier, 1 Beta 1.5.0-beta and earlier, and 2.1.2a and earlier.
What type of vulnerability is CVE-2008-4537?
CVE-2008-4537 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts.
Can CVE-2008-4537 lead to unauthorized access?
Yes, CVE-2008-4537 can enable unauthorized access to user sessions or data through the execution of arbitrary scripts.