CVE-2008-6465: XSS
Published Mar 13, 2009
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the (1) err, (2) errorcode, and (3) login parameters.
Affected Software
2 affected components
Parallels H-Sphere=3.0.0-p9
Parallels H-Sphere=3.1-p1
Event History
Mar 13, 2009
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6465?
CVE-2008-6465 has a medium severity rating due to its potential for exploitation through cross-site scripting.
2
How do I fix CVE-2008-6465?
To fix CVE-2008-6465, update Parallels H-Sphere to a version that has patched the XSS vulnerabilities.
3
What type of vulnerabilities are associated with CVE-2008-6465?
CVE-2008-6465 is associated with multiple cross-site scripting (XSS) vulnerabilities.
4
Who is affected by CVE-2008-6465?
CVE-2008-6465 affects users running Parallels H-Sphere versions 3.0.0 P9 and 3.1 P1.
5
What parameters can be exploited in CVE-2008-6465?
CVE-2008-6465 allows exploitation through the err, errorcode, and login parameters.