CVE-2008-6924: XSS

Published Aug 10, 2009

Updated

Multiple cross-site scripting (XSS) vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) email, (3) password, (4) password2, (5) securitycode, and (6) register parameters.

Affected Software

1 affected component

Intelliants Esyndicat=2.2

Event History

Aug 10, 2009

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-6924?

CVE-2008-6924 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2008-6924?

To fix CVE-2008-6924, upgrade eSyndiCat Directory to the latest version where this vulnerability has been addressed.

What are the affected software versions for CVE-2008-6924?

CVE-2008-6924 affects eSyndiCat Directory version 2.2.

What types of parameters are vulnerable in CVE-2008-6924?

CVE-2008-6924 allows injection via the username, email, password, password2, security_code, and register parameters.

Can CVE-2008-6924 be exploited remotely?

Yes, CVE-2008-6924 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.