CVEvulnerability
CVE-2008-2557
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-06-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) Links and (2) Links Submit pages.
Affected configurations
• cre loaded cre loaded (<= 6.2.13.1)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://oscommerceuniversity.com/lounge/index.php?topic=249.0 URL Repurposed
- http://secunia.com/advisories/30655 secunia.com
- http://www.securityfocus.com/bid/29786 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42888 exchange.xforce.ibmcloud.com
- http://oscommerceuniversity.com/lounge/index.php?topic=249.0 URL Repurposed
- http://secunia.com/advisories/30655 secunia.com
- http://www.securityfocus.com/bid/29786 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42888 exchange.xforce.ibmcloud.com