CVE-2008-2987 Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin_edit_submenu.php, (2) admin_new_submen...
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin_edit_submenu.php, (2) admin_new_submenu.php, and (3) admin_edit_topmenu.php in admin/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| benjacms benja cms | = 0.1 | No fix listed |
References
- 30834 third-party-advisory vendor-advisory
- 3958 third-party-advisory
- 20080622 Benja CMS 0.1 (Upload/XSS) Multiple Remote Vulnerabilities mailing-list
- 29884 exploit vdb-entry
- benja-multiple-xss(43284) vdb-entry