CVE-2008-3201

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) acct_fname and (2) acct_lname parameters in an edit action, and the (3) PID, (4) PGID, and (5) rez parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Link	Resource
http://downloads.securityfocus.com/vulnerabilities/exploits/30155.html	Exploit
http://www.securityfocus.com/bid/30155
http://secunia.com/advisories/31050	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43711

Configuration 1

cpe:2.3:a:pagefusion:pagefusion:1.5:*:*:*:*:*:*:*

---

Published : 2008-07-17 01:41

Updated : 2017-08-08 01:31

---

NVD link : CVE-2008-3201

Mitre link : CVE-2008-3201

No products.

CWE-79