CVE-2008-6982 Cross-site scripting (XSS) vulnerability in index.php in devalcms 1.4a allows remote attackers to inject arbitrary web script or HTML via the currentpath parameter.
MediumCVSS 4.3
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php in devalcms 1.4a allows remote attackers to inject arbitrary web script or HTML via the currentpath parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| devalcms | = 1.4a | No fix listed |
References
- 47971 vdb-entry
- sourceforge.net patch
- 31037 exploit vdb-entry
- devalcms-currentpath-xss(44940) vdb-entry
- 6369 exploit