Back to CVE Browser

CVE-2008-4438

MEDIUM

4.3

CVSS Severity Score

EPSS Score0.1350%

EPSS Percentile2.25th

PublishedOct 3, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

Cross-site scripting (XSS) vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Platforms (CPE)

📦

Datafeed Studio

Datafeed Studio

= 1.6.2

References & Advisories

🔗 http://blog.datafeedstudio.com/datafeed-studio-v163-released

🔗 http://downloads.securityfocus.com/vulnerabilities/exploits/30660.html

🔗 http://secunia.com/advisories/31488

🔗 http://www.securityfocus.com/bid/30660

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/44417

🔗 http://blog.datafeedstudio.com/datafeed-studio-v163-released

🔗 http://downloads.securityfocus.com/vulnerabilities/exploits/30660.html

🔗 http://secunia.com/advisories/31488

Related Vulnerabilities

CVE-2008-443910.0

PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote attackers ...

CVE-2008-714410.0

Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) AC...

CVE-2008-714910.0

Unspecified vulnerability in AgileWiki before 0.10.1 has unknown impact and attack vectors related to passwords.

CVE-2008-718910.0

Multiple unspecified vulnerabilities in Local Media Browser before 0.1 have unknown impact and attack vectors related to "Security...