CVE-2008-3398 Multiple cross-site scripting (XSS) vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to unspecified components, possibly including...
LowCVSS 2.6
EPSS 1.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to unspecified components, possibly including login.php. NOTE: this may overlap CVE-2008-1129.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xrms crm | = 1.99.2 | No fix listed |
References
- 31233 third-party-advisory vendor-advisory
- 4081 third-party-advisory
- 20080725 XRMS 1.99.2 (RFI/XSS/IG) Multiple Remote Vulnerabilities mailing-list
- 30369 vdb-entry
- xrmscrm-msg-xss(43994) vdb-entry
- 6131 exploit