CVE-2008-1985 Cross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary web script or HTML via the mt parameter, possibly related to membres.php.
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary web script or HTML via the mt parameter, possibly related to membres.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| digital hive digitalhive | = 2.0-rc2 | No fix listed |
References
- 28918 exploit vdb-entry
- www.z0rlu.ownspace.org exploit
- digitalhive-base-xss(42006) vdb-entry