CVE-2008-6208: XSS

Published Feb 20, 2009

Updated

Cross-site scripting (XSS) vulnerability in submitnews.php in e107 CMS 0.7.11 allows remote attackers to inject arbitrary web script or HTML via the (1) authorname, (2) itemtitle, and (3) item parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

1 affected component

e107 e107=0.7.11

Event History

Feb 20, 2009

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

via NVD·01:30 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-6208?

CVE-2008-6208 is classified as a moderate severity Cross-site Scripting (XSS) vulnerability.

How do I fix CVE-2008-6208?

To fix CVE-2008-6208, update to a version of e107 CMS that is not affected, or implement input validation to sanitize user input.

What software is affected by CVE-2008-6208?

CVE-2008-6208 affects e107 CMS version 0.7.11.

What does CVE-2008-6208 exploit?

CVE-2008-6208 exploits a vulnerability in submitnews.php allowing for arbitrary web script or HTML injection.

Is CVE-2008-6208 related to user input?

Yes, CVE-2008-6208 is related to inadequate validation of user input for parameters like author_name, itemtitle, and item.