Skip to content

CVE-2008-5893 Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attackers to inject arbitrary web script or HTML via the tablename parameter in an update action.

LowCVSS 2.6 EPSS 1.6%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attackers to inject arbitrary web script or HTML via the tablename parameter in an update action.

Affected products

ProductAffected versionsFixed in
icash clickemail = _nil_ No fix listed

References

  • 33155 third-party-advisory vendor-advisory
  • 4903 third-party-advisory
  • 32857 vdb-entry
  • 7485 exploit