CVE-2008-6571
31.03.2009, 17:30
Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.4 might allow remote attackers to inject arbitrary web script or HTML via (1) new_images.php, (2) login.php, and unspecified vectors.
| Vendor | Product | Version |
|---|---|---|
| linpha | linpha | 𝑥 ≤ 1.3.3 |
| linpha | linpha | 0.9.0 |
| linpha | linpha | 0.9.1 |
| linpha | linpha | 0.9.2 |
| linpha | linpha | 0.9.3 |
| linpha | linpha | 0.9.4 |
| linpha | linpha | 1.0 |
| linpha | linpha | 1.0:beta1 |
| linpha | linpha | 1.0:beta2 |
| linpha | linpha | 1.0:beta3 |
| linpha | linpha | 1.0:rc1 |
| linpha | linpha | 1.1.0 |
| linpha | linpha | 1.1.1 |
| linpha | linpha | 1.2.0 |
| linpha | linpha | 1.3.0 |
| linpha | linpha | 1.3.1 |
| linpha | linpha | 1.3.2 |
𝑥
= Vulnerable software versions
References