CVE-2008-6056 Multiple cross-site scripting (XSS) vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to emailrecipe.aspx, (2) id parameter to....
MediumCVSS 4.3
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to emailrecipe.aspx, (2) id parameter to recipedetail.aspx, and the (3) catid parameter to validatefieldlength.aspx.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ex-designs world recipe | = 2.11 | No fix listed |
References
- 20081215 Multiple XSS Vulnerabilities in World Recipe 2.11 mailing-list
- 32837 vdb-entry
- worldrecipe-multiple-xss(47366) vdb-entry