CVEvulnerability
CVE-2008-4053
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-09-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Bluemoon PopnupBLOG module 3.20 and 3.30 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the (1) param, (2) cat_id, and (3) view parameters.
Affected configurations
• bluemoon popnupblog 3.20
• bluemoon popnupblog 3.30
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://lostmon.blogspot.com/2008/08/popnupblog-indexphp-multiple-variables.html Exploit
- http://secunia.com/advisories/31625 secunia.com
- http://www.securityfocus.com/bid/30827 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44680 exchange.xforce.ibmcloud.com
- http://lostmon.blogspot.com/2008/08/popnupblog-indexphp-multiple-variables.html Exploit
- http://secunia.com/advisories/31625 secunia.com
- http://www.securityfocus.com/bid/30827 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44680 exchange.xforce.ibmcloud.com