CVE-2008-2115 Multiple cross-site scripting (XSS) vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) te and (2) dir parameters....
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) te and (2) dir parameters in a tempedit action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| scriptsez power editor | = 2.0 | No fix listed |
References
- 3864 third-party-advisory
- 20080506 Power Editor LOCAL FILE INCLUSION Vulnerbility mailing-list
- 29063 exploit vdb-entry
- powereditor-editor-xss(42223) vdb-entry
- 5549 exploit