Unscored severity · published Sep 24, 2008
CVE-2008-3098
Cross-site scripting (XSS) vulnerability in admin/usercheck.php in fuzzylime (cms) before 3.03 allows remote attackers to inject arbitrary web script or HTML via the user…
–
CVSS
2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in admin/usercheck.php in fuzzylime (cms) before 3.03 allows remote attackers to inject arbitrary web script or HTML via the user parameter to the login form.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FC
Fuzzylime Cms · Fuzzylime
3.0; 3.01; 3.01a; 3.01b; 3.02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3098
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3098
Patch
http://cms.fuzzylime.co.uk/st/content/download/
Patch
http://secunia.com/advisories/31980
securityreason.com
http://securityreason.com/securityalert/4303
Exploit
http://www.datensalat.eu/~fabian/cve/CVE-2008-3098-fuzzylime-cms.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/496589/100/0/threaded
Exploit
http://www.securityfocus.com/bid/31306
More from Fuzzylime Cms
–
CVE-2009-2177
code/display.php in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to conduct directory traversal attacks and overwrite arbitrary…
–
CVE-2009-2176
Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local…
–
CVE-2008-6834
Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.01 and 3.01a allow remote attackers to include and execute arbitrary local files via a
–
CVE-2008-6833
Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b allows remote attackers to include and execute arbitrary local files via a
–
CVE-2008-5291
Directory traversal vulnerability in code/track.php in FuzzyLime 3.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the…