CVE-2008-4435

Multiple cross-site scripting (XSS) vulnerabilities in the RMSOFT Downloads Plus (rmdp) module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the (1) key parameter to search.php and the (2) id parameter to down.php.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:rmsoft:downloads_plus_module:1.5:*:*:*:*:*:*:*
cpe:2.3:a:rmsoft:downloads_plus_module:1.7:*:*:*:*:*:*:*
cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:51

Type Values Removed Values Added
References () http://lostmon.blogspot.com/2008/08/rmsoft-downloads-plus-two-scripts-two.html - Exploit () http://lostmon.blogspot.com/2008/08/rmsoft-downloads-plus-two-scripts-two.html - Exploit
References () http://www.securityfocus.com/bid/30620 - Exploit () http://www.securityfocus.com/bid/30620 - Exploit
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/44376 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/44376 -

Information

Published : 2008-10-03 22:22

Updated : 2024-11-21 00:51


NVD link : CVE-2008-4435

Mitre link : CVE-2008-4435

CVE.ORG link : CVE-2008-4435


JSON object : View

Products Affected

rmsoft

  • downloads_plus_module

xoops

  • xoops
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')