First published: Mon Sep 14 2009(Updated: )
Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the rank_title parameter in a RankForumAdd action.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Runcms Runcms | =1.6.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-7222 has a moderate severity level due to its potential for cross-site scripting attacks.
To fix CVE-2008-7222, validate and sanitize all user inputs, especially the rank_title parameter.
CVE-2008-7222 affects RunCMS version 1.6.1.
Yes, CVE-2008-7222 can be exploited remotely by attackers to inject malicious scripts.
CVE-2008-7222 can lead to unauthorized script execution, potentially compromising user data.