CVEvulnerability
CVE-2008-1850
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-04-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in login.php in Omnistar Interactive OSI Affiliate allow remote attackers to inject arbitrary web script or HTML via the (1) login, (2) profile, (3) profile2, and (4) ref parameters.
Affected configurations
• osiaffiliate osiaffiliate
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/29779 Vendor Advisory
- http://www.mrzayas.es/2008/04/11/xss-en-osiaffiliate/ www.mrzayas.es
- http://www.osvdb.org/44376 www.osvdb.org
- http://www.securityfocus.com/bid/28785 www.securityfocus.com
- http://www.securityfocus.com/bid/28793 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41811 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41825 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/29779 Vendor Advisory
- http://www.mrzayas.es/2008/04/11/xss-en-osiaffiliate/ www.mrzayas.es
- http://www.osvdb.org/44376 www.osvdb.org
- http://www.securityfocus.com/bid/28785 www.securityfocus.com
- http://www.securityfocus.com/bid/28793 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41811 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41825 exchange.xforce.ibmcloud.com