Back to CVE Browser

CVE-2008-2494

MEDIUM

4.3

CVSS Severity Score

EPSS Score0.1990%

EPSS Percentile23.66th

PublishedMay 28, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

Cross-site scripting (XSS) vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via the l parameter.

Affected Platforms (CPE)

📦

Pancake

Zina

= 1.0_rc3

References & Advisories

🔗 http://www.securityfocus.com/archive/1/492593/100/0/threaded

🔗 http://www.securityfocus.com/bid/29367

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/42642

🔗 http://www.securityfocus.com/archive/1/492593/100/0/threaded

🔗 http://www.securityfocus.com/bid/29367

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/42642

Related Vulnerabilities

CVE-2007-030310.0

Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to "Potential secur...

CVE-2005-46317.5

SQL injection vulnerability in index.php in Zina 0.12.07 and earlier allows remote attackers to execute arbitrary SQL commands via...

CVE-2008-24957.5

Directory traversal vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to have an unknown impact via a .. (dot dot...

CVE-2008-665110.0

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP c...