CVEvulnerability
CVE-2008-2911
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-06-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject arbitrary web script or HTML via the (1) contenido, (2) Belang, and (3) username parameters.
Affected configurations
• contenido contendio 4.8.4
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/30683 Vendor Advisory
- http://www.securityfocus.com/bid/29719 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43107 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5810 www.exploit-db.com
- http://secunia.com/advisories/30683 Vendor Advisory
- http://www.securityfocus.com/bid/29719 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43107 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5810 www.exploit-db.com