CVEvulnerability
CVE-2008-3923
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-09-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in statistics.php in Content Management Made Easy (CMME) 1.12 allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) year parameters in an hstat_year action.
Affected configurations
• hans oesterholt cmme 1.12
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/31599 Vendor Advisory
- http://securityreason.com/securityalert/4220 securityreason.com
- http://www.securityfocus.com/bid/30854 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44685 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6313 www.exploit-db.com
- http://secunia.com/advisories/31599 Vendor Advisory
- http://securityreason.com/securityalert/4220 securityreason.com
- http://www.securityfocus.com/bid/30854 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44685 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6313 www.exploit-db.com