CVE-2008-6894

2009-08-0318:00:00

mitre

www.cve.org

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

65.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in login.php in 3CX Phone System Free Edition 6.1793 and 6.0.806.0 allow remote attackers to inject arbitrary web script or HTML via the (1) fName and (2) fPassword parameters.

References

marc.info/?l=full-disclosure&m=122868146707468&w=2

osvdb.org/50599

secunia.com/advisories/33060

www.securityfocus.com/bid/32709

exchange.xforce.ibmcloud.com/vulnerabilities/47167