CVE-2008-0793

Multiple cross-site scripting (XSS) vulnerabilities in search.asp in Tendenci CMS allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) searchtext, (3) jobcategoryid, (4) contactcompany, and unspecified other parameters. NOTE: some of these details are obtained from third party information. NOTE: it is not clear whether this affects Tendenci Enterprise Edition in addition to the product's deployment on Tendenci's own server farm. If only the latter was affected, then this issue should not be included in CVE.

• CWE-79

• http://blog.tendenci.com/2008/02/cross-site-scri.html
• http://holisticinfosec.blogspot.com/2008/02/fastest-fix-in-west-vendors-excellent.html
• http://secunia.com/advisories/28882Vendor Advisory
• http://www.securityfocus.com/bid/27782
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40477
• http://blog.tendenci.com/2008/02/cross-site-scri.html
• http://holisticinfosec.blogspot.com/2008/02/fastest-fix-in-west-vendors-excellent.html
• http://secunia.com/advisories/28882Vendor Advisory
• http://www.securityfocus.com/bid/27782
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40477

Published

Feb 15, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0787SQL injection vulnerability in inc/datahandlers/pm.php in My…
• CVE-2008-0788Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2008-0789SQL injection vulnerability in countdown.php in LI-Scripts L…
• CVE-2008-0790Directory traversal vulnerability in ipdsserver.exe in Inter…
• CVE-2008-0791ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows re…
• CVE-2008-0792Multiple F-Secure anti-virus products, including Internet Se…
• CVE-2008-0794Directory traversal vulnerability in user/header.php in Affi…
• CVE-2008-0795SQL injection vulnerability in index.php in the MGFi XfaQ (c…
• CVE-2008-0796SQL injection vulnerability in threads.php in Nuboard 0.5 al…
• CVE-2008-0797Directory traversal vulnerability in lib/download.php in iTh…
• CVE-2008-0798Multiple directory traversal vulnerabilities in artmedic web…
• CVE-2008-0799SQL injection vulnerability in index.php in the Quiz (com_qu…