CVE-2008-3098

🗓️ 24 Sep 2008 14:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 53 Views🌐 WEB

CVE-2008-3098 Cross-site scripting (XSS) vulnerability in admin/usercheck.php in fuzzylime (cms) before 3.03 allows remote attackers to inject arbitrary web script or HTML via the user parameter to the login form

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2008-3098	22 Sep 200800:00	–	circl
Cvelist	CVE-2008-3098	24 Sep 200814:00	–	cvelist
EUVD	EUVD-2008-3088	7 Oct 202500:30	–	euvd
NVD	CVE-2008-3098	24 Sep 200814:56	–	nvd
Packet Storm	fuzzylime302-xss.txt	22 Sep 200800:00	–	packetstorm
Prion	Cross site scripting	24 Sep 200814:56	–	prion
securityvulns	Cross Site Scripting (XSS) Vulnerabilitiy in fuzzylime (cms) >=3.02, CVE-2008-3098	24 Sep 200800:00	–	securityvulns
securityvulns	Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)	24 Sep 200800:00	–	securityvulns

NVD

Node

fuzzylime fuzzylime_cmsMatch3.0

fuzzylime fuzzylime_cmsMatch3.01

fuzzylime fuzzylime_cmsMatch3.01a

fuzzylime fuzzylime_cmsMatch3.01b

fuzzylime fuzzylime_cmsMatch3.02

Source	Link
securityfocus	www.securityfocus.com/bid/31306
secunia	www.secunia.com/advisories/31980
securityreason	www.securityreason.com/securityalert/4303
securityfocus	www.securityfocus.com/archive/1/496589/100/0/threaded
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/45342
datensalat	www.datensalat.eu/~fabian/cve/CVE-2008-3098-fuzzylime-cms.html
cms	www.cms.fuzzylime.co.uk/st/content/download/
vupen	www.vupen.com/english/advisories/2008/2650

Parameter	Position	Path	Description	CWE
user	request body	admin/usercheck.php	Cross-site scripting via the user parameter in the login form (admin/usercheck.php) leading to injection of HTML/JS	CWE-79

23 Apr 2026 00:35Current

5.7Medium risk

Vulners AI Score5.7

CVSS 24.3

EPSS0.10267

CWE-79