NetSight
IP …
medium4.3

CVE-2009-2342

Cross-site scripting (XSS) vulnerability in admin.php (aka the login page) in Content Management Made Easy (CMME) before 1.22 allows remote attackers to inject…

Impact

Cross-site scripting (XSS) vulnerability in admin.php (aka the login page) in Content Management Made Easy (CMME) before 1.22 allows remote attackers to inject arbitrary web script or HTML via the username field.

Affected products

VendorProductAffected versions
Hans OesterholtCmme
through 1.21
Versions 1.02, 1.03, 1.06, 1.07, 1.08

Weakness classification

CWE-79

References