CVE-2008-1985 – Digital Hive - Multiple Vulnerabilities

https://notcve.org/view.php?id=CVE-2008-1985

Cross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary web script or HTML via the mt parameter, possibly related to membres.php. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en base.php en DigitalHive 2.0 RC2 permite a atacantes remotos inyectar 'script' web arbitrario o HTML mediante el parámetro mt, posiblemente relacionada con "membres.php". • https://www.exploit-db.com/exploits/10427 https://www.exploit-db.com/exploits/31701 http://www.securityfocus.com/bid/28918 http://www.z0rlu.ownspace.org/index.php?/archives/65-hive-v2.RC2-XSS.html https://exchange.xforce.ibmcloud.com/vulnerabilities/42006 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •