CVE-2008-3098

Cross-site scripting (XSS) vulnerability in admin/usercheck.php in fuzzylime (cms) before 3.03 allows remote attackers to inject arbitrary web script or HTML via the user parameter to the login form.

• CWE-79

• http://cms.fuzzylime.co.uk/st/content/download/Patch
• http://secunia.com/advisories/31980Patch, Vendor Advisory
• http://securityreason.com/securityalert/4303
• http://www.datensalat.eu/~fabian/cve/CVE-2008-3098-fuzzylime-cms.htmlExploit
• http://www.securityfocus.com/archive/1/496589/100/0/threaded
• http://www.securityfocus.com/bid/31306Exploit
• http://www.vupen.com/english/advisories/2008/2650
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45342
• http://cms.fuzzylime.co.uk/st/content/download/Patch
• http://secunia.com/advisories/31980Patch, Vendor Advisory
• http://securityreason.com/securityalert/4303
• http://www.datensalat.eu/~fabian/cve/CVE-2008-3098-fuzzylime-cms.htmlExploit
• http://www.securityfocus.com/archive/1/496589/100/0/threaded
• http://www.securityfocus.com/bid/31306Exploit
• http://www.vupen.com/english/advisories/2008/2650
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45342

Published

Sep 24, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-3092SQL injection vulnerability in the Taxonomy Autotagger modul…
• CVE-2008-3093Unrestricted file upload vulnerability in ImperialBB 2.3.5 a…
• CVE-2008-3094The Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x be…
• CVE-2008-3095Cross-site scripting (XSS) vulnerability in the Organic Grou…
• CVE-2008-3096The Outline Designer module 5.x before 5.x-1.4 for Drupal ch…
• CVE-2008-3097Cross-site scripting (XSS) vulnerability in the Tinytax modu…
• CVE-2008-3100Cross-site scripting (XSS) vulnerability in lib/owl.lib.php …
• CVE-2008-3101Multiple cross-site scripting (XSS) vulnerabilities in vtige…
• CVE-2008-3102Mantis 1.1.x through 1.1.2 and 1.2.x through 1.2.0a2 does no…
• CVE-2008-3103Unspecified vulnerability in the Java Management Extensions …
• CVE-2008-3104Multiple unspecified vulnerabilities in Sun Java Runtime Env…
• CVE-2008-3105Unspecified vulnerability in the JAX-WS client and service i…