medium4.3Public exploit code
CVE-2008-7057
Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote attackers to inject arbitrary HTML or web script via the type p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BandSite CMS 1.1.4 - Download Backup / Cross-Site Scripting / Cross-Site Request Forgery2008-08-21 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote attackers to inject arbitrary HTML or web script via the type parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grayscalecms | Bandsite Cms | Version 1.1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21992
- http://www.securityfocus.com/bid/30788
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44590
- https://www.exploit-db.com/exploits/6286
- http://secunia.com/advisories/21992
- http://www.securityfocus.com/bid/30788
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44590
- https://www.exploit-db.com/exploits/6286