CVE-2008-6982

Cross-site scripting XSS vulnerability in index.php in devalcms 1.4a allows remote attackers to inject arbitrary web script or HTML via the currentpath parameter...

CVE-2008-6982

Devalcms 1.4a contains a Cross-Site Scripting (XSS) vulnerability in the currentpath parameter of index.php. The nuclei template for CVE-2008-6982 confirms the affected software/version and impact: arbitrary JavaScript execution in the victim’s browser, which can lead to session hijacking or info...