CVE-2008-6979 Cross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to inject arbitrary web script or HTML via the results_per_page parameter to in...
MediumCVSS 4.3
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to inject arbitrary web script or HTML via the results_per_page parameter to index.php. NOTE: some of these details are obtained from third party information. NOTE: this issue might be resultant from a separate SQL injection vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpadultsite cms | = 2.3.2 | No fix listed |
References
- 47943 exploit vdb-entry
- 31793 third-party-advisory vendor-advisory
- www.davidsopas.com
- 20080907 phpAdultSite CMS flaws mailing-list
- 31057 exploit vdb-entry
- phpadultsitecms-asarchives-xss(44923) vdb-entry