CVEvulnerability
CVE-2008-2861
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-06-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topic and (2) button parameters to ansFAQ.asp and the (3) id and (4) txtEmail parameters to login.asp.
Affected configurations
• elinestudio site composer (<= 2.6)
• elinestudio site composer 2.5
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/30762 Vendor Advisory
- http://securityreason.com/securityalert/3957 securityreason.com
- http://www.securityfocus.com/archive/1/493473/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29812 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43191 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5859 www.exploit-db.com
- http://secunia.com/advisories/30762 Vendor Advisory
- http://securityreason.com/securityalert/3957 securityreason.com
- http://www.securityfocus.com/archive/1/493473/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29812 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43191 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5859 www.exploit-db.com