CVE-2008-6675 Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the close parameter to showThumb.aspx; (2) SB_redirect an...
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the close parameter to showThumb.aspx; (2) SB_redirect and (3) SB_feedback parameters in process_send.asp, as reachable through default.asp; (4) paramCode and (5) cColor parameters to picker.asp; and the (6) query string, (7) Referer header, and (8) X-FORWARDED-FOR header to rss.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| quickersite | = 1.8.5 | No fix listed |
References
- 46221 vdb-entry
- 30501 third-party-advisory vendor-advisory
- www.bugreport.ir exploit
- www.bugreport.ir exploit
- 29524 vdb-entry
- quickersite-showthumb-xss(42860) vdb-entry