CVE-2008-2787

Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the last_message parameter.

• CWE-79

• http://secunia.com/advisories/30750Patch, Vendor Advisory
• http://securityreason.com/securityalert/3948
• http://www.s21sec.com/avisos/s21sec-044-en.txtExploit
• http://www.securityfocus.com/archive/1/493390/100/0/threaded
• http://www.securityfocus.com/bid/29765Exploit, Patch
• http://www.securitytracker.com/id?1020300Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43135
• http://secunia.com/advisories/30750Patch, Vendor Advisory
• http://securityreason.com/securityalert/3948
• http://www.s21sec.com/avisos/s21sec-044-en.txtExploit
• http://www.securityfocus.com/archive/1/493390/100/0/threaded
• http://www.securityfocus.com/bid/29765Exploit, Patch
• http://www.securitytracker.com/id?1020300Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43135

Published

Jun 20, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-2781SQL injection vulnerability in index.php in DZOIC Handshakes…
• CVE-2008-2782Multiple directory traversal vulnerabilities in OtomiGenX 2.…
• CVE-2008-2783Multiple cross-site scripting (XSS) vulnerabilities in Horde…
• CVE-2008-2784The smtp_filter function in spamdyke before 3.1.8 does not f…
• CVE-2008-2785Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunde…
• CVE-2008-2786Buffer overflow in Firefox 3.0 and 2.0.x has unknown impact …
• CVE-2008-2788Cross-site scripting (XSS) vulnerability in index.php in Ope…
• CVE-2008-2789SQL injection vulnerability in pages/index.php in BASIC-CMS …
• CVE-2008-2790SQL injection vulnerability in detail.php in MountainGrafix …
• CVE-2008-2791SQL injection vulnerability in product.detail.php in Kalptar…
• CVE-2008-2792SQL injection vulnerability in index.php in eroCMS 1.4 and e…
• CVE-2008-2793SQL injection vulnerability in group_posts.php in ClipShare …