Unscored severity · published Aug 19, 2008
CVE-2008-3709
Multiple cross-site scripting (XSS) vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to inject arbitrary web script or HTML via the (1) lOptionsOptions, (2)…
–
CVSS
1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to inject arbitrary web script or HTML via the (1) lOptionsOptions, (2) lNavAdminOptions, or (3) lNavReturn parameter to options.php; or the (4) lNavReturn parameter to subscribe.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Cyboards Php Lite · Hotscripts
1.21 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3709
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3709
packetstormsecurity.org
http://packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt
www.attrition.org
http://www.attrition.org/pipermail/vim/2008-August/002052.html
www.securityfocus.com
http://www.securityfocus.com/bid/30688
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/44476
More from Cyboards Php Lite
–
CVE-2008-3707
Multiple PHP remote file inclusion vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to execute arbitrary PHP code via a URL in the script_path parameter to (1)…
–
CVE-2008-3710
Multiple directory traversal vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the…