CVE-2008-7222: XSS
Published Sep 14, 2009
·Updated
Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the ranktitle parameter in a RankForumAdd action.
Affected Software
1 affected component
Runcms RunCMS=1.6.1
Event History
Sep 14, 2009
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-7222?
CVE-2008-7222 has a moderate severity level due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2008-7222?
To fix CVE-2008-7222, validate and sanitize all user inputs, especially the rank_title parameter.
3
What software versions are affected by CVE-2008-7222?
CVE-2008-7222 affects RunCMS version 1.6.1.
4
Can CVE-2008-7222 be exploited remotely?
Yes, CVE-2008-7222 can be exploited remotely by attackers to inject malicious scripts.
5
What impact does CVE-2008-7222 have on web applications?
CVE-2008-7222 can lead to unauthorized script execution, potentially compromising user data.