medium4.3
CVE-2008-0940
Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.4.24 allows remote attackers to inject arbitrary web script or HTML when creating a use…
Impact
Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.4.24 allows remote attackers to inject arbitrary web script or HTML when creating a username, a different vulnerability than CVE-2007-0407.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webgui | Webgui | Versions 7.4, 7.4.2, 7.4.3, 7.4.4, 7.4.5, 7.4.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/28967
- http://www.plainblack.com/getwebgui/advisories/webgui-7_4_24-stable-released
- http://www.securityfocus.com/bid/27869
- http://secunia.com/advisories/28967
- http://www.plainblack.com/getwebgui/advisories/webgui-7_4_24-stable-released
- http://www.securityfocus.com/bid/27869