CVEvulnerability

CVE-2008-2035

4.3 MEDIUM Published 2008-04-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-04-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in the Bluemoon, Inc. (1) BackPack 0.91 and earlier, (2) BmSurvey 0.84 and earlier, (3) newbb_fileup 1.83 and earlier, (4) News_embed (news_fileup) 1.44 and earlier, and (5) PopnupBlog 3.19 and earlier modules for XOOPS 2.0.x, XOOPS Cube 2.1, and ImpressCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

• bluemoon backpack (<= 0.91) • bluemoon bmsurvey (<= 0.84) • bluemoon newbb fileup (<= 1.83) • bluemoon news fileup (<= 1.44) • bluemoon popnupblog (<= 3.19) • xoops xoops 2.0 • xoops xoops cube 2.1

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References