CVEvulnerability
CVE-2008-2644
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-06-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary web script or HTML via the (1) data parameter to catalog.php, the (2) keyword parameter to search.php, the (3) page parameter to bb.php, and the (4) new_s parameter to order.php.
Affected configurations
• smeweb smeweb 1.4b
• smeweb smeweb 1.4f
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/30477 Vendor Advisory
- http://www.securityfocus.com/archive/1/493130/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29496 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42813 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5725 www.exploit-db.com
- http://secunia.com/advisories/30477 Vendor Advisory
- http://www.securityfocus.com/archive/1/493130/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29496 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42813 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5725 www.exploit-db.com