Published: 24/08/2009 Updated: 29/09/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email Script 1.0 up to and including 1.11 allows remote malicious users to inject arbitrary web script or HTML via the Email parameter. NOTE: this can be leveraged to modify cookies and conduct session fixation attacks.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freshscripts fresh email script 1.0
freshscripts fresh email script 1.11

1 +-----------------+-----------------+-----------------+ 2 +-----------------+Fresh Email Script+----------------+ 3 +-----------------versions: 10 to 111 - all 4 +-----------------exploits: file inclusion & cookie manipulation 5 +-----------------founder: Don 6 +-----------------date: November 10 2008 7 + ...

CWE-79 http://osvdb.org/49849 http://secunia.com/advisories/32642 http://www.vupen.com/english/advisories/2008/3096 http://www.securityfocus.com/bid/32241 https://exchange.xforce.ibmcloud.com/vulnerabilities/46529 https://www.exploit-db.com/exploits/7080 https://nvd.nist.gov https://www.exploit-db.com/exploits/7080/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-7043

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect