CVE-2008-2082

EUVD-2008-2079
Cross-site scripting (XSS) vulnerability in index.php in Siteman 2.0.x2 allows remote attackers to inject arbitrary web script or HTML via the module parameter, which leaks the path in an error message.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
sitemansiteman
2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://ircrash.com/english/index.php?topic=29.0
http://www.securityfocus.com/bid/28943
https://exchange.xforce.ibmcloud.com/vulnerabilities/42020
https://www.exploit-db.com/exploits/5499
http://ircrash.com/english/index.php?topic=29.0
http://www.securityfocus.com/bid/28943
https://exchange.xforce.ibmcloud.com/vulnerabilities/42020
https://www.exploit-db.com/exploits/5499