Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2008-4537

EPSS 0.52% · P67
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-4537

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 Beta(RC) 2.1.1-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17336 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4535 and CVE-2008-4536.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
ec-cube 跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
EC-CUBE Ver1, Ver1 Beta, Ver2, Ver2 Beta(RC), Community Edition, 以及Community Edition Nightly-Build r17336 及其早期版本中存在跨站脚本攻击漏洞。远程攻击者可以通过未明向量来执行任意web脚本或HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-4537

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-4537

Please Login to view more intelligence information

Same Patch Batch · n/a · 2008-10-10 · 17 CVEs total

CVE-2008-4534ec-cube SQL注入漏洞
CVE-2008-4535ec-cube 跨站脚本攻击漏洞
CVE-2008-4536ec-cube 跨站脚本攻击漏洞
CVE-2008-3432Vim 缓冲区错误漏洞
CVE-2008-3641Apple Mac OS X HPGL过滤器存在安全访问漏洞
CVE-2008-3642Apple Mac OS X ICC配置文件缓冲区溢出
CVE-2008-3643Apple Mac OS X Finder访问漏洞
CVE-2008-3645Apple Mac OS X IPC组件堆栈溢出漏洞
CVE-2008-3646Apple Mac OS X Postfix配置文件访问漏洞
CVE-2008-3647Apple Mac OS X 'PostScript'缓冲区溢出漏洞
CVE-2008-4211Apple Mac OS QuickLook 越界内存地址访问漏洞
CVE-2008-4212Apple Mac OS 'hosts.equiv' 用户权限漏洞
CVE-2008-4214Apple Mac OS X 脚本访问遍历漏洞
CVE-2008-4215Apple Mac OS X weblog访问控制权限漏洞
CVE-2008-4394gentoo portage 'Python' 路径遍历漏洞
CVE-2008-4533katan web_server 跨站脚本攻击漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2008-4537

No comments yet


Leave a comment