Skip to content

CVE-2008-5290 Cross-site scripting (XSS) vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

MediumCVSS 4.3 EPSS 1.5%
Published
Updated
Exploit status
No public exploit known

Description

Cross-site scripting (XSS) vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Affected products

ProductAffected versionsFixed in
scripts4you clean cms = 1.5 No fix listed

References

  • 32866 third-party-advisory vendor-advisory
  • 4666 third-party-advisory
  • 32474 vdb-entry
  • 7228 exploit