CVE-2008-7223
Severity CVSS v4.0:
Pending analysis
Type:
CWE-79
Cross-Site Scripting (XSS)
Publication date:
14/09/2009
Last modified:
09/04/2025
Description
Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php, or (5) plugins/stats/stats_view.php.
Impact
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:linpha:linpha:*:*:*:*:*:*:*:* | 1.3.2 (including) | |
cpe:2.3:a:linpha:linpha:0.9.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:linpha:linpha:0.9.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:linpha:linpha:0.9.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:linpha:linpha:0.9.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:linpha:linpha:0.9.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:linpha:linpha:1.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:linpha:linpha:1.0:beta1:*:*:*:*:*:* | ||
cpe:2.3:a:linpha:linpha:1.0:beta2:*:*:*:*:*:* | ||
cpe:2.3:a:linpha:linpha:1.0:beta3:*:*:*:*:*:* | ||
cpe:2.3:a:linpha:linpha:1.0:rc1:*:*:*:*:*:* | ||
cpe:2.3:a:linpha:linpha:1.1.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:linpha:linpha:1.1.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:linpha:linpha:1.2.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:linpha:linpha:1.3.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://freshmeat.net/projects/linpha/releases/271366
- http://linpha.cvs.sourceforge.net/linpha/linpha/ChangeLog?view=markup
- http://osvdb.org/43191
- http://www.securityfocus.com/bid/27678
- http://freshmeat.net/projects/linpha/releases/271366
- http://linpha.cvs.sourceforge.net/linpha/linpha/ChangeLog?view=markup
- http://osvdb.org/43191
- http://www.securityfocus.com/bid/27678