CVE-2008-2644 | BDVDB-2026-31010 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary web script or HTML via the (1) data parameter to catalog.php, the (2) keyword parameter to search.php, the (3) page parameter to bb.php, and the (4) new_s parameter to order.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/5725
https://exchange.xforce.ibmcloud.com/vulnerabilities/42813
http://secunia.com/advisories/30477
http://www.securityfocus.com/archive/1/493130/100/0/threaded
http://www.securityfocus.com/bid/29496

Exploit#

https://www.exploit-db.com/exploits/5725

History#

Version 12008-06-10Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.