CVE Vulnerability

CVE-2008-2035

Cross-site scripting (XSS) vulnerability in the Bluemoon, Inc. (1) BackPack 0.91 and earlier, (2) BmSurvey 0.84 and earlier, (3) newbb_fileup 1.83 and earlier, (4) News_embed (news_fileup) 1.44 and earlier, and (5) PopnupBlog 3.19 and earlier modules for XOOPS 2.0.x, XOOPS Cube 2.1, and ImpressCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
http://jvn.jp/jp/JVN%2331351020/index.html
http://www.bluemooninc.biz/~xoops/modules/news/article.php?storyid=69
http://secunia.com/advisories/29993 Vendor Advisory
http://www.securityfocus.com/bid/28966
https://exchange.xforce.ibmcloud.com/vulnerabilities/42072
Configurations

Configuration 1

cpe:2.3:a:xoops:xoops_cube:2.1:*:*:*:*:*:*:*
cpe:2.3:a:bluemoon:popnupblog:*:*:*:*:*:*:*:*
cpe:2.3:a:bluemoon:newbb_fileup:*:*:*:*:*:*:*:*
cpe:2.3:a:bluemoon:backpack:*:*:*:*:*:*:*:*
cpe:2.3:a:bluemoon:news_fileup:*:*:*:*:*:*:*:*
cpe:2.3:a:xoops:xoops:2.0:*:*:*:*:*:*:*
cpe:2.3:a:bluemoon:bmsurvey:*:*:*:*:*:*:*:*
Information

Published : 2008-04-30 04:17

Updated : 2017-08-08 01:30

NVD link : CVE-2008-2035

Mitre link : CVE-2008-2035

Products Affected
No products.
CWE
CWE-79