CVE-2008-7043 Cross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to inject arbitrary web script or HTML via the Email parameter. NOT...
MediumCVSS 4.3
EPSS 1.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to inject arbitrary web script or HTML via the Email parameter. NOTE: this can be leveraged to modify cookies and conduct session fixation attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freshscripts fresh email script | = 1.0 | No fix listed |
| freshscripts fresh email script | = 1.11 | No fix listed |
References
- 49849 vdb-entry
- 32642 third-party-advisory vendor-advisory
- 32241 exploit vdb-entry
- ADV-2008-3096 vdb-entry vendor-advisory
- freshemailscript-register-session-hijacking(46529) vdb-entry
- 7080 exploit