CVE-2008-0359 Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin.php or (2) index.php in photo/.
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin.php or (2) index.php in photo/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blog cms | = 4.2.1_c | No fix listed |
References
- blogcms.com
- 20080116 [DSECRG-08-003] blogcms 4.2.1b Multiple Security Vulnerabilities exploit mailing-list
- 28523 third-party-advisory vendor-advisory
- 27317 exploit patch vdb-entry
- blogcms-index-xss(39710) vdb-entry
- 4919 exploit