CVE-2008-6982

2009-08-1810:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.0%

JSON

Cross-site scripting (XSS) vulnerability in index.php in devalcms 1.4a allows remote attackers to inject arbitrary web script or HTML via the currentpath parameter.

References

osvdb.org/47971

sourceforge.net/projects/devalcms/files/devalcms/devalcms-1.4b/devalcms-1.4b.zip/download

www.securityfocus.com/bid/31037

exchange.xforce.ibmcloud.com/vulnerabilities/44940

www.exploit-db.com/exploits/6369