CVE-2008-4536
10.10.2008, 18:13
Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 Beta(RC) 2.2.0-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17319 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4535 and CVE-2008-4537.
| Vendor | Product | Version |
|---|---|---|
| ec-cube | ec-cube | 𝑥 ≤ 1.3.4 |
| ec-cube | ec-cube | 𝑥 ≤ 2.1.2a |
| ec-cube | ec-cube | 𝑥 ≤ 2.3.0 |
| ec-cube | ec-cube | 1.0 |
| ec-cube | ec-cube | 1.4.7 |
| ec-cube | ec-cube | 1.5.0:b2 |
𝑥
= Vulnerable software versions
References