CVE-2008-3923 | BDVDB-2026-32262 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in statistics.php in Content Management Made Easy (CMME) 1.12 allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) year parameters in an hstat_year action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/31599
http://www.securityfocus.com/bid/30854
http://securityreason.com/securityalert/4220
https://www.exploit-db.com/exploits/6313
https://exchange.xforce.ibmcloud.com/vulnerabilities/44685

Exploit#

https://www.exploit-db.com/exploits/6313

History#

Version 12008-09-04Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.