CVE-2008-0334

Cross-site scripting (XSS) vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the L_PREF_NAME[855] parameter.

Score

CVSS 2.0 2.6 Low

Status

Modified - cve@mitre.org

Published

2008-01-17

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Pmachine Pro (Pmachine)

References

• http://packetstormsecurity.org/0801-exploits/pMachinePro-241-xss.txt
• http://www.securityfocus.com/bid/27282