CVEvulnerability
CVE-2008-6700
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-04-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) mytable parameter to view.php, (2) mytable parameter to viewdb2.php, (3) tablehere parameter to category-rename.php, and (4) letter parameter to module-contacts.php.
Affected configurations
• butterflymedia butterfly organizer 2.0.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.securityfocus.com/bid/29700 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43066 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5797 www.exploit-db.com
- http://www.securityfocus.com/bid/29700 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43066 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5797 www.exploit-db.com