CVE-2008-2046 – SiteXS CMS 0.1.1 - Arbitrary File Upload / Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2008-2046

Cross-site scripting (XSS) vulnerability in index.php in Softpedia SiteXS CMS 0.1.1 Pre-Alpha allows remote attackers to inject arbitrary web script or HTML via the user parameter. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de Softpedia SiteXS CMS 0.1.1 Pre-Alpha permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro user. • https://www.exploit-db.com/exploits/5880 http://marc.info/?l=bugtraq&m=120950161507846&w=2 http://www.securityfocus.com/bid/28984 https://exchange.xforce.ibmcloud.com/vulnerabilities/42093 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •