CVE-2008-6616: XSS

Published Apr 6, 2009

Updated

Cross-site scripting (XSS) vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in the advancedsearchresult page. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

1 affected component

Zen-cart Zen Cart=2008

Event History

Apr 6, 2009

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-6616?

CVE-2008-6616 is considered a moderate severity vulnerability since it allows for cross-site scripting attacks.

How do I fix CVE-2008-6616?

To fix CVE-2008-6616, you should validate and sanitize all user inputs, especially the keyword parameter in the advanced_search_result page.

What software is affected by CVE-2008-6616?

CVE-2008-6616 affects Zen Cart version 2008.

What type of attack is possible due to CVE-2008-6616?

CVE-2008-6616 enables remote attackers to perform cross-site scripting (XSS) injections.

Is there a known exploit for CVE-2008-6616?

Yes, there are known exploits that demonstrate the XSS vulnerability in CVE-2008-6616.