CVE-2008-7036

2009-08-2410:00:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier, and DevTracker module 0.20 for E-XooPS 1.0.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) direction and (2) order_by parameters.