CVE-2008-2680 Multiple cross-site scripting (XSS) vulnerabilities in _db/compact.asp in Realm CMS 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) CmpctedDB and (2) Boyut pa...
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in _db/compact.asp in Realm CMS 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) CmpctedDB and (2) Boyut parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realm project realm cms | <= 2.3 | No fix listed |
References
- bugreport.ir exploit
- 30583 third-party-advisory vendor-advisory
- 29616 vdb-entry
- realm-compact-xss(42953) vdb-entry
- 5766 exploit