CVE-2008-2458 Cross-site scripting (XSS) vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the st parameter.
MediumCVSS 4.3
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the st parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 4shared starsgames control panel | <= 4.6.2 | No fix listed |
References
- 30321 third-party-advisory vendor-advisory
- 20080520 Starsgames Control Panel <= 4.6.2 Remote XSS Vulnerability mailing-list
- 29295 exploit vdb-entry
- starsgamescontrolpanel-index-xss(42544) vdb-entry