CVE-2008-6035: XSS
Published Feb 3, 2009
·Updated
Cross-site scripting (XSS) vulnerability in dispatch.php in Achievo 1.3.2-STABLE allows remote attackers to inject arbitrary web script or HTML via the atknodetype parameter.
Affected Software
1 affected component
Achievo Achievo=1.3.2
Event History
Feb 3, 2009
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Data Sourced
via NVD·11:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6035?
CVE-2008-6035 is classified as a medium severity vulnerability due to its cross-site scripting (XSS) risks.
2
How do I fix CVE-2008-6035?
To fix CVE-2008-6035, update Achievo to the latest version or apply appropriate input validation to sanitize the atknodetype parameter.
3
What type of vulnerability is CVE-2008-6035?
CVE-2008-6035 is a cross-site scripting (XSS) vulnerability.
4
Who is affected by CVE-2008-6035?
CVE-2008-6035 affects users of Achievo version 1.3.2.
5
What can attackers do using CVE-2008-6035?
Attackers can inject arbitrary web script or HTML into the application, potentially compromising user data and security.