CVE-2008-2861

Multiple cross-site scripting (XSS) vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topic and (2) button parameters to ansFAQ.asp and the (3) id and (4) txtEmail parameters to login.asp.

Link	Resource
http://www.securityfocus.com/bid/29812	Exploit
http://secunia.com/advisories/30762	Vendor Advisory
http://securityreason.com/securityalert/3957
https://exchange.xforce.ibmcloud.com/vulnerabilities/43191
https://www.exploit-db.com/exploits/5859
http://www.securityfocus.com/archive/1/493473/100/0/threaded

Configuration 1

cpe:2.3:a:elinestudio:site_composer:*:*:*:*:*:*:*:* cpe:2.3:a:elinestudio:site_composer:2.5:*:*:*:*:*:*:*

---

Published : 2008-06-25 12:36

Updated : 2018-10-11 08:44

---

NVD link : CVE-2008-2861

Mitre link : CVE-2008-2861

No products.

CWE-79