CVE-2008-1474

Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting (XSS).

• CWE-79

• http://roundup.cvs.sourceforge.net/roundup/roundup/CHANGES.txt?revision=1.939&view=markupPatch, Vendor Advisory
• http://secunia.com/advisories/29336Vendor Advisory
• http://secunia.com/advisories/29375Vendor Advisory
• http://secunia.com/advisories/29848Patch, Vendor Advisory
• http://secunia.com/advisories/30274Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200805-21.xml
• http://www.debian.org/security/2008/dsa-1554
• http://www.securityfocus.com/bid/28239Patch
• http://www.vupen.com/english/advisories/2008/0891Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=436546
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41241
• https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00264.html
• https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00375.html
• http://roundup.cvs.sourceforge.net/roundup/roundup/CHANGES.txt?revision=1.939&view=markupPatch, Vendor Advisory
• http://secunia.com/advisories/29336Vendor Advisory
• http://secunia.com/advisories/29375Vendor Advisory
• http://secunia.com/advisories/29848Patch, Vendor Advisory
• http://secunia.com/advisories/30274Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200805-21.xml
• http://www.debian.org/security/2008/dsa-1554
• http://www.securityfocus.com/bid/28239Patch
• http://www.vupen.com/english/advisories/2008/0891Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=436546
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41241
• https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00264.html
• https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00375.html

Published

Mar 24, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-1468Cross-site scripting (XSS) vulnerability in namazu.cgi in Na…
• CVE-2008-1469Gallarific Free Edition 1.1 does not require authentication …
• CVE-2008-1470Incomplete blacklist vulnerability in IISWebAgentIF.dll in t…
• CVE-2008-1471The cpoint.sys driver in Panda Internet Security 2008 and An…
• CVE-2008-1472Stack-based buffer overflow in the ListCtrl ActiveX Control …
• CVE-2008-1473The Altiris Client Service (AClient.exe) in Symantec Altiris…
• CVE-2008-1475The xml-rpc server in Roundup 1.4.4 does not check property …
• CVE-2008-1476Cross-site scripting (XSS) vulnerability in Serendipity (S9Y…
• CVE-2008-1477Multiple cross-site scripting (XSS) vulnerabilities in busca…
• CVE-2008-1478Home FTP Server 1.4.5.89 allows remote attackers to cause a …
• CVE-2008-1479Cross-site scripting (XSS) vulnerability in index.php in cyb…
• CVE-2008-1480rpc.metad in Sun Solaris 10 allows remote attackers to cause…