Description

Multiple cross-site scripting (XSS) vulnerabilities in the RMSOFT Downloads Plus (rmdp) module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the (1) key parameter to search.php and the (2) id parameter to down.php.

Remediation

References

CVE-2008-4435

Related Vulnerabilities

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-5022)

WordPress Plugin Crowd Ideas Cross-Site Scripting (1.0)

WordPress Plugin Newsletters Multiple Vulnerabilities (4.6.14)

IBM RTC Improper Input Validation Vulnerability (CVE-2015-1928)

WordPress Plugin Concours Cross-Site Scripting (1.1)

Severity

Medium

Classification

CVE-2008-4435 CWE-707

Tags

Missing Update Known Vulnerabilities