CVE-2008-5059
13.11.2008, 11:30
Cross-site scripting (XSS) vulnerability in index.php in ModernBill 4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript event in the new_language parameter in a login action.
| Vendor | Product | Version |
|---|---|---|
| modernbill | modernbill | 𝑥 ≤ 4.4 |
| modernbill | modernbill | 𝑥 ≤ 4.4.0 |
| modernbill | modernbill | 2.01 |
| modernbill | modernbill | 2.02s:s |
| modernbill | modernbill | 3.0:beta |
| modernbill | modernbill | 3.1.0 |
| modernbill | modernbill | 3.1.3 |
| modernbill | modernbill | 4.0.1:rc7 |
| modernbill | modernbill | 4.0.1:rc8 |
| modernbill | modernbill | 4.0.2 |
| modernbill | modernbill | 4.1.1 |
| modernbill | modernbill | 4.1.2 |
| modernbill | modernbill | 4.1.3 |
| modernbill | modernbill | 4.2.1 |
| modernbill | modernbill | 4.3.0 |
| modernbill | modernbill | 4.3.2 |
𝑥
= Vulnerable software versions
References