CVE-2008-4893

Cross-site scripting XSS vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the templatepath parameter. NOTE: the provenance of this information ...

CVE-2008-4893

Affected software: Tribiq CMS 5.0.10a. Vulnerable component: templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php. Root cause: cross-site scripting when register_globals is enabled, via the template_path parameter. Impact: remote attackers can inject arbitrary web script or HTML. Exploi...