CVE-2008-7043

EPSS 1.7%

Cross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to inject arbitrary web script or HTML via the Email parameter. NOTE: this can be leveraged to modify cookies and conduct session fixation attacks.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/7080unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/49849 http://secunia.com/advisories/32642 https://exchange.xforce.ibmcloud.com/vulnerabilities/46529 https://www.exploit-db.com/exploits/7080 http://www.securityfocus.com/bid/32241 http://www.vupen.com/english/advisories/2008/3096