CVE-2008-2082 Cross-site scripting (XSS) vulnerability in index.php in Siteman 2.0.x2 allows remote attackers to inject arbitrary web script or HTML via the module parameter, which leaks the path in an error messag...
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php in Siteman 2.0.x2 allows remote attackers to inject arbitrary web script or HTML via the module parameter, which leaks the path in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siteman | = 2.0 | No fix listed |
References
- ircrash.com exploit
- 28943 vdb-entry
- siteman-index-xss(42020) vdb-entry
- 5499 exploit