CVE-2008-4349

The CVE-2008-4349 entry relates to multiple XSS vulnerabilities in the news.php component of s0nic Paranews 3.4, exploitable via the (1) id or (2) page parameter in a details action. Evidence from NVD and related records confirms a cross-site scripting flaw that could allow remote attackers to in...

paranews-xss.txt

Author : Xylitol Contact : n/a Vendor : s0nic www.monxoom.de Version: 3.4 D0rks : Powered by Paranews 3.4 Public release vulnz: 10/09/08 Impact: low Stop lammer 1. Description: Auf den Namen »ParaNews« habe ich mein Newsscript getauft, welches zur Pflege eines Newsbereich in einer Website gedacht...