CVE-2008-7098
Last modified
CVE-2008-7098 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in Qsoft K-Rate Premium allow remote attackers to inject arbitrary web script or HTML via the blog, possibly the (1) Title and (2) Text fields; (3) the gallery, possibly the Description field in Your Pictures; (4) the forum, possibly the Your Message field when posting a new thread; or (5) the vote parameter in a view action to index.php. NOTE: some of these details are obtained from third party information.. EPSS estimates a 2.00% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Qsoft K-Rate Premium allow remote attackers to inject arbitrary web script or HTML via the blog, possibly the (1) Title and (2) Text fields; (3) the gallery, possibly the Description field in Your Pictures; (4) the forum, possibly the Your Message field when posting a new thread; or (5) the vote parameter in a view action to index.php. NOTE: some of these details are obtained from third party information.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qsoft-Inc | K-Rate | All versions |
References
- http://secunia.com/advisories/31548Vendor Advisory
- http://secunia.com/advisories/31548Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-7098?
How severe is CVE-2008-7098?
How do I fix CVE-2008-7098?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-7092Multiple cross-site scripting (XSS) vulnerabilities in Unica…
- CVE-2008-7093Multiple directory traversal vulnerabilities in Unica Affini…
- CVE-2008-7094Campaign/CampaignListener in the listener server in Unica Af…
- CVE-2008-7095The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Control…
- CVE-2008-7096Intel Desktop and Intel Mobile Boards with BIOS firmware DQ3…
- CVE-2008-7097Multiple SQL injection vulnerabilities in Qsoft K-Rate Premi…
- CVE-2008-7099Unspecified vulnerability in the Manage Templates feature in…
- CVE-2008-7100Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 …
- CVE-2008-7101Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 an…
- CVE-2008-7102DotNetNuke 2.0 through 4.8.4 allows remote attackers to load…
- CVE-2008-7103Stack-based buffer overflow in an ActiveX control in najdisi…
- CVE-2008-7104Sophos PureMessage Scanner service (PMScanner.exe) in PureMe…
Are you affected by CVE-2008-7098?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST