CVE-2008-4435

Multiple cross-site scripting (XSS) vulnerabilities in the RMSOFT Downloads Plus (rmdp) module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the (1) key parameter to search.php and the (2) id parameter to down.php.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.46% chance of exploitation in the next 30 days, 73rd percentile

Published

2008-10-03

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/32216
• https://www.exploit-db.com/exploits/32215

Security advisories

• http://www.securityfocus.com/bid/30620

References

• CVE Record
• NVD entry