Published: 14/05/2008 Updated: 11/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 445

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote malicious users to inject arbitrary web script or HTML via the (1) keywords parameter to upload/admin/index.php in a search action, the (2) msg_charset and (3) msg_header9 parameters to admin/inc/header.php, and the (4) keywords parameter to index.php in a search action.

Vulnerable Product	Search on Vulmon	Subscribe to Product
maianscriptworld maian uploader 4.0

source: wwwsecurityfocuscom/bid/29051/info Maian Uploader is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may all ...

source: wwwsecurityfocuscom/bid/29051/info Maian Uploader is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow ...

source: wwwsecurityfocuscom/bid/29051/info Maian Uploader is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may a ...

CWE-79 http://www.securityfocus.com/bid/29051 http://secunia.com/advisories/30096 http://securityreason.com/securityalert/3882 https://exchange.xforce.ibmcloud.com/vulnerabilities/42203 http://www.securityfocus.com/archive/1/491599/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/31742/

CVE-2008-2202

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect