CVE-2008-6283

Impact

Cross-site scripting (XSS) vulnerability in Subtext 2.0 allows remote attackers to inject arbitrary web script or HTML via a comment, related to "the feature which converts URLs to anchor tags."

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://haacked.com/archive/2008/11/27/subtext-2.1-security-update.aspx
• http://osvdb.org/50235
• http://secunia.com/advisories/32914
• http://sourceforge.net/project/shownotes.php?release_id=643458&group_id=137896
• http://www.securityfocus.com/bid/32513
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46937
• http://haacked.com/archive/2008/11/27/subtext-2.1-security-update.aspx
• http://osvdb.org/50235
• http://secunia.com/advisories/32914
• http://sourceforge.net/project/shownotes.php?release_id=643458&group_id=137896
• http://www.securityfocus.com/bid/32513
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46937