CVE-2008-5338 Cross-site scripting (XSS) vulnerability in info.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to inject arbitrary web script or HTML via the section parameter.
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in info.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to inject arbitrary web script or HTML via the section parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| multimania bandsite portal system | = 1.5 | No fix listed |
| multimania bandwebsite | = 1.5 | No fix listed |
References
- 4689 third-party-advisory
- 32454 exploit vdb-entry
- z0rlu.blogspot.com exploit
- bandwebsite-info-xss(46817) vdb-entry
- 7215 exploit