CVE-2008-6924: XSS
First published: Mon Aug 10 2009(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) email, (3) password, (4) password2, (5) security_code, and (6) register parameters.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Esyndicat | =2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2008-6924?
CVE-2008-6924 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2008-6924?
To fix CVE-2008-6924, upgrade eSyndiCat Directory to the latest version where this vulnerability has been addressed.
What are the affected software versions for CVE-2008-6924?
CVE-2008-6924 affects eSyndiCat Directory version 2.2.
What types of parameters are vulnerable in CVE-2008-6924?
CVE-2008-6924 allows injection via the username, email, password, password2, security_code, and register parameters.
Can CVE-2008-6924 be exploited remotely?
Yes, CVE-2008-6924 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/severity
- agent/author
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/intelliants
- canonical/esyndicat
- version/esyndicat/2.2