CVE-2008-2980
Last modified
CVE-2008-2980 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in HomePH Design 2.10 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) error_meldung parameter to admin/features/register/register.php, the (2) feature_language[ueberschrift] parameter to admin/features/memberlist/memberlist.php, the (3) language_array[ueberschrift] parameter to admin/features/lostpassword/lostpassword.php, the (4) language_feature[titel] parameter to admin/features/kalender/eingabe.php, and the (5) language_feature[bildmenu] parameter to admin/features/fotogalerie/eingabe.php.. EPSS estimates a 1.22% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in HomePH Design 2.10 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) error_meldung parameter to admin/features/register/register.php, the (2) feature_language[ueberschrift] parameter to admin/features/memberlist/memberlist.php, the (3) language_array[ueberschrift] parameter to admin/features/lostpassword/lostpassword.php, the (4) language_feature[titel] parameter to admin/features/kalender/eingabe.php, and the (5) language_feature[bildmenu] parameter to admin/features/fotogalerie/eingabe.php.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Homeph Design | Homeph Design | 2.10 | Rc2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-2980?
How severe is CVE-2008-2980?
How do I fix CVE-2008-2980?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-2974Directory traversal vulnerability in chatconfig.php in MM Ch…
- CVE-2008-2975Cross-site scripting (XSS) vulnerability in admin/objects/ob…
- CVE-2008-2976Multiple directory traversal vulnerabilities in TinX/cms 1.1…
- CVE-2008-2977Multiple PHP remote file inclusion vulnerabilities in Ourvid…
- CVE-2008-2978Directory traversal vulnerability in phpi/rss.php in Ourvide…
- CVE-2008-2979Multiple cross-site scripting (XSS) vulnerabilities in phpi/…
- CVE-2008-2981PHP remote file inclusion vulnerability in admin/templates/t…
- CVE-2008-2982Multiple directory traversal vulnerabilities in HomePH Desig…
- CVE-2008-2983SQL injection vulnerability in index.php in Demo4 CMS 01 Bet…
- CVE-2008-2984Cross-site scripting (XSS) vulnerability in backend/umleitun…
- CVE-2008-2985Directory traversal vulnerability in load_language.php in CM…
- CVE-2008-2986Multiple PHP remote file inclusion vulnerabilities in phpDMC…
Are you affected by CVE-2008-2980?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST