← back
CVE-2008-5761

CVE-2008-5761

EPSS 1.7%
Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter to the default URI; (2) the foto parameter to photo.php in the 05_Foto module; or (3) the name parameter in an insertrecord action to index.php in the 08_Files module, as demonstrated by injection within a SRC attribute of an IFRAME element.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/7461unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/33175http://securityreason.com/securityalert/4825https://exchange.xforce.ibmcloud.com/vulnerabilities/47367https://exchange.xforce.ibmcloud.com/vulnerabilities/47369https://www.exploit-db.com/exploits/7461http://www.securityfocus.com/bid/32826http://www.securityfocus.com/bid/32828