CVE-2008-0751

Cross-site scripting (XSS) vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to plugin/tag/.

• CWE-79

• http://blog.s9y.org/archives/190-Freetag-plugin-updated-to-prevent-XSS.htmlVendor Advisory
• http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060122.htmlThird Party Advisory
• http://secunia.com/advisories/28852Third Party Advisory
• http://www.bitsploit.de/uploads/Code/200802080000/Broken Link
• http://www.securityfocus.com/bid/27697Exploit, Patch, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40376Third Party Advisory, VDB Entry
• http://blog.s9y.org/archives/190-Freetag-plugin-updated-to-prevent-XSS.htmlVendor Advisory
• http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060122.htmlThird Party Advisory
• http://secunia.com/advisories/28852Third Party Advisory
• http://www.bitsploit.de/uploads/Code/200802080000/Broken Link
• http://www.securityfocus.com/bid/27697Exploit, Patch, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40376Third Party Advisory, VDB Entry

Published

Feb 13, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0745Directory traversal vulnerability in aides/index.php in DomP…
• CVE-2008-0746SQL injection vulnerability in index.php in the Gallery (com…
• CVE-2008-0747Stack-based buffer overflow in COWON America jetAudio 7.0.5 …
• CVE-2008-0748Buffer overflow in the Sony AxRUploadServer.AxRUploadControl…
• CVE-2008-0749Cross-site scripting (XSS) vulnerability in index.php in Cal…
• CVE-2008-0750SQL injection vulnerability in philboard_forum.asp in Husrev…
• CVE-2008-0752SQL injection vulnerability in index.php in the Neogallery (…
• CVE-2008-0753SQL injection vulnerability in calendar.php in Virtual War (…
• CVE-2008-0754Multiple SQL injection vulnerabilities in index.php in the R…
• CVE-2008-0755Format string vulnerability in the ReportSysLogEvent functio…
• CVE-2008-0756The LPD server in cyan soft Opium OPI Server 4.10.1028 and e…
• CVE-2008-0757Cross-site scripting (XSS) vulnerability in index.php in Mer…