CVE-2008-5164 Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) viewarticle.php and (b) vie...
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) viewarticle.php and (b) viewarticle2.php and the (2) PATH_INFO to viewarticle.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| theratstudios the rat cms | = 2-pre_alpha | No fix listed |
References
- 4612 third-party-advisory
- 20080626 The Rat CMS (SQL/XSS) Multiple Remote Vulnerabilities mailing-list
- 29959 exploit vdb-entry
- theratcms-viewarticle-xss(43378) vdb-entry